Google Vault FAQ

Learn more about how Vault works.

Open all   |   Close all

Licensing and accounts

Open all   |   Close all

How do I buy Vault for my organization?

For many Google Workspace editions, Vault licenses are included for all users in your organization. If Vault isn't included in yours, you might be able to buy add-on licenses.

Vault licenses included Vault add-on licenses available
  • Business Plus
  • Enterprise
  • Enterprise Essentials (domain-verified only)
  • Education Fundamentals and Plus
  • G Suite Business
  • Frontline
  • G Suite Basic

Compare your edition

Learn more about how to buy Vault licenses for your organization.

If a user's managed Google Account is deleted, is any data retained by Vault for this user also deleted?

Yes. If you delete a user, all the data associated with the user's account is removed from Google.

When you delete a user:

  • You can't search for or export any of their data from Vault.
  • Any retention rules or holds placed on the user's data no longer apply. Data can be expunged right away.
  • You can recover data for 20 days after you delete the user. However, any data that is already expunged can't be recovered. Learn how to restore a recently deleted user.

As a best practice, we recommend you use an Archived User (AU) license to preserve the user’s data. For more information, see Manage former employees and their data. If you use Google Cloud Directory Sync, ensure that the tool is configured to suspend accounts instead of deleting them.

How do I preserve data for a user who leaves my organization?

Do not delete the account. If you delete a user, you also delete any data retained by Vault.

To keep a user's data available to Vault after they leave your organization, assign them an Archived User (AU) license. For more information, see Manage former employees and their data. Alternatively, you can suspend their account to preserve data and disable services, but a suspended account is billed the same as an active account.

If a group is deleted, are messages in Groups retained by Vault also deleted?
Yes. When a group is deleted, messages in the group are also deleted, similar to what happens when you delete a user's account. Messages in Groups are deleted even when the deleted group was subject to a hold or retention rule. However, messages in Gmail that accounts receive through a subscription to a group aren't deleted and are subject to Gmail retention rules and holds.
What happens to a Vault user that has exceeded the Google Workspace storage limit?

There is no impact to Vault when this happens. However, a user who has exceeded the storage limit can no longer send or receive new email messages and may experience general account degradation.

Using Vault

Open all   |   Close all

How do I access data through Vault?

To access data, sign in to https://vault.google.com, create a matter, and search your organization's data. Your Vault admin might restrict the data that you can access and search. Learn how to search for data and about Vault privileges.

Can vanity domains be created for Vault? For example, vault.my_domain.com.

No. For security reasons, Vault can only be accessed through https://vault.google.com.

Can I allow people outside my organization to access my organization's data through Vault?

You can allow third parties to sign in to Vault. Learn how to allow an external user to access Vault.

How do I export data using Vault?

Learn how to export Vault data.

Is Vault a data backup or archive tool?

No. Vault isn’t designed to be a backup or archive tool.

Why shouldn’t I use Vault for backups or data pulls?

  • Vault exports aren’t designed for large-scale or high-volume data backups. You can export data for a limited number of accounts and only for one Google service at a time. Vault also doesn’t allow many parallel exports or scheduling automatic exports.
  • Vault exports are prepared for legal discovery purposes, not efficient data processing. Vault can’t create differential backups or deduplicate data. For example, a Drive export includes all items the searched account has access to. When many accounts have access to the same items, they’re exported for each account, resulting in lots of duplicated data.
  • Vault doesn’t support all Google services. Vault can export data only from supported Google services. Vault doesn’t support services such as Calendar, Contacts, Keep, and Currents.
  • Restoring data from Vault export files is hard. Vault doesn’t have any automated recovery tools.
    • For Gmail, Chat, and Groups, you must use G Suite Migration for Microsoft Exchange (GSMME) to import PST files. Google doesn’t have a tool to bulk import mbox files.
    • For Drive exports, the files aren’t separated by account and Google files, such as docs, spreadsheets, and presentations, are in a different format.
    • Voice data can’t be restored from Vault export files.

Still need to back up or extract data?

You might want a backup to protect your data against human error or ransomware attacks. Google has some options:

  • To export your entire organization’s data, use Data Export.
  • A user can also export their own data. For example, if you’re a small business with  few employees, you can each export and back up your own data.

Google also has many tools to work with and extract your organization’s data, such as APIs and BigQuery. For third-party and partner options, review the Google Cloud backup and archive solutions.

Can I restore messages or files retained by Vault back to Gmail or Drive?

For data that was deleted fewer than 25 days ago, we recommend that you use the Google admin console to restore a user’s Google Drive or Gmail data.

How Vault works

Open all   |   Close all

How long is data retained by Vault?

You can set retention periods to meet your needs, including indefinite retention. Learn more about Vault retention.

Can users delete data that's retained by Vault?

Users can delete messages and items in Google services, but any data that's subject to a retention rule or hold remains available to Vault users in Vault. Deleted messages retained by Vault don't count against users' storage. Learn more about using Vault for retention.

How does Vault log Vault user actions?

All Vault user actions are monitored and tracked in an audit trail. If a user with privileges to change the retention period attempts to do so, that action is tracked in the audit log. The action can't be removed from the audit log. Learn more about Vault’s audit capabilities.

How reliable is Vault?

Google replicates your organization's data between multiple geographically dispersed data centers. Learn more about Google’s enterprise reliability commitments.

How does Google handle law enforcement requests?

Google complies with the law when responding to third-party requests for user information. Learn about Google’s enterprise privacy commitments.

What certifications and standards does Vault meet?

Learn about Google’s enterprise compliance commitments.

 

Other Vault FAQs:

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
96539
false