We do everything in our power to protect you and your businesses, schools, and government organizations from attempts to compromise your data. We vigorously resist any unlawful attempt to access our customers’ data, whether it be from a hacker or a government body.
In order to help answer some of the many questions we receive, we have created this FAQ and a corresponding G Suite security site. We hope this helps to answer some of your questions about Google's position on these important issues. Be sure to check Google's Privacy and Terms page for more consumer tools and information relating to consumer privacy.
If you need to report an abuse issue, learn more about reporting abuse issues to our team.Do we maintain ownership of the data we place in Google's Cloud?
The data that companies, schools, and students put into our systems is theirs, whether it’s corporate intellectual property, personal information, or a homework assignment.
To put it simply, the data that companies, schools, and government agencies put into our systems are theirs. Whether it’s corporate intellectual property, personal information, or a homework assignment, Google does not own that data.
That means two key things:
- We use your information for the purposes specified in your agreement, such as delivering you the service for which you pay. There are no ads in Google Cloud.
- You have control over your data. We provide you with tools to delete and export your data so that you can take your data with you at any time, use external services in conjunction with G Suite, or stop using our services altogether.
Google processes your data to fulfill our contractual obligation to deliver our services. Google’s customers own their data, not Google. The data that companies, schools, and students put into our systems is theirs. Google does not sell your data to third parties. Google offers our customers a detailed Data Processing Amendment that describes our commitment to protecting your data.
- We do not use your data for advertising
- The data that you entrust with us remains yours
- We provide you with tools to delete and export your data
- We are transparent about where your data is stored
No. There are no ads in G Suite Services or Google Cloud Platform, and we have no plans to change this in the future. We do not scan for advertising purposes in Gmail or other G Suite services. Google does not collect or use data in G Suite services for advertising purposes.
The process is different for our free offerings and the consumer space. For information on our free consumer products, be sure to check Google's Privacy and Terms page for more consumer tools and information relating to consumer privacy.
G Suite for Education services do not collect or use student data for advertising purposes or create advertising profiles.
Gmail for consumers and G Suite for Education users runs on the same infrastructure, which helps us deliver high performance, reliability, and security to all of our users. However, G Suite is a separate offering that provides additional security, administrative, and archiving controls for education, business, and government customers.
Like many email providers, we perform scanning in Gmail to keep our customers secure and to improve their product experience. In Gmail for G Suite for Education, this includes virus and spam protection, spell check, relevant search results and features, such as Priority Inbox and auto-detection of calendar events. Scanning to provide product features is done on all incoming emails and is 100% automated. We do not scan G Suite for Education emails for advertising purposes.
Additionally, we do not collect or use any information stored in Apps for Education users’ Google Drive or Docs (or Sheets, Slides, Drawings, Forms) for any advertising purposes.
Users who have chosen to show Adsense ads on their Google Sites will still have the ability to display those existing ads on their websites. However, it will no longer be possible to edit or add new AdSense ads to existing sites or to new pages.
Google Cloud does not scan your data or email in G Suite Services for advertising purposes. Our automated systems scan and index your data to provide you with your services and to protect your data, such as to perform spam and malware detection, to sort email for features like Priority Inbox and to return fast, powerful search results when users search for information in their accounts. The situation is different for our free offerings and the consumer space. For information on our free consumer products, be sure to check Google's Privacy and Terms page for more consumer tools and information relating to consumer privacy.
We provide tools so that you can take your data with you if you choose to use external services in conjunction with G Suite or stop using our services altogether, without penalty or additional cost imposed by Google.
Google’s security practices are verified and certified by third-party auditors. We have achieved ISO 27001 certification, which means that an independent auditor has examined the controls present in our data centers, infrastructure, and operation. This certification sets a bar for security that is often higher than what is achieved by many of our customers. Amongst these practices, employees are subject to background investigations based on their level of access. Any employee access is governed by a policy of “least privilege access,” which means that access is only granted to the information and resources that are necessary for the execution of the assigned task.
We believe that you should have control over your data. When you agree to our Data Processing Amendment, Google contractually commits to deleting your G Suite data from our systems within 180 days of your deleting it in our Apps services.
When you delete data, the pointers to that data are removed immediately, but Google’s application and network architecture is designed for maximum reliability and uptime. Data is distributed across Google's servers and data centers. If a machine—or even an entire data center—fails, your data will still be accessible. As a result it can take up to 180 days to ensure that every bit of customer data is purged from our systems.
Respect for the privacy and security of the data you store with Google underpins our approach to complying with legal requests for user data. Our legal team reviews each and every government request for user data to make sure it satisfies legal requirements and Google's policies, and we push back when the requests are overly broad or don’t follow the correct process.
We push back when government requests are overly broad or don’t follow the correct process. We do this frequently, such as when we persuaded a court to drastically limit a U.S. government request for two months of user search queries. When we are legally required to comply with these requests, we deliver that information to the authorities. We want you to know that storing your data in a particular country does not necessarily protect the data from access by foreign governments.
Google notifies users about legal demands when appropriate, unless prohibited by law or court order, and since 2009 has published aggregate statistics about government requests for user information in our Transparency Report .