By launching Google Workspace Client-side encryption, we’re helping customers strengthen the confidentiality of their data while addressing a broad range of data sovereignty and compliance requirements. Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. We’re taking this a step further by giving customers direct control of encryption keys and the identity service they choose to access those keys. With Client-side encryption, customer data is indecipherable to Google, while users can continue to take advantage of Google’s native web-based collaboration, access content on mobile devices, and share encrypted files externally. When combined with our other encryption capabilities, customers can add new levels of data protection for their Google Workspace data.
Google Workspace delivers new levels of trusted collaboration for a hybrid work world.
Client-side encryption is especially beneficial for organizations that store sensitive or regulated data, like intellectual property, healthcare records, or financial data. It can help meet data sovereignty requirements and compliance requirements for ITAR, CJIS, TISAX, IRS 1075, and EAR.
Transforming collaboration in Google Workspace
In order to maintain the segregation of duties, enabling Client-side encryption requires you to choose a key access service partner: Flowcrypt, Futurex, Thales, or Virtru. Each of these partners have built tools in accordance with Google’s specifications and provide both key management and access control capabilities. Your partner of choice holds the key to decode encrypted Google Workspace files, and Google cannot access or decipher these files without this key. If you prefer to build or integrate your own in-house key services, we will be publishing the key access service API specifications that can be used with Client-side encryption later this year.
We’ll be rolling out a beta for Client-side encryption in the coming weeks for Google Workspace Enterprise Plus and Google Workspace Education Plus customers. Client-side encryption will initially be available for Google Drive, Docs, Sheets, and Slides, with support for multiple file types including Office files, PDFs, and more. Interested customers can sign up now for the beta.
- Making collaboration more flexible and helpful
- Fostering human connection—wherever people work
- Working smarter and safer
- Transforming how people work to deliver real-world innovation
- Alert Center enrichment with VirusTotal threat context
More control over secure collaboration with trust rules for Drive
Because sharing ideas and information is at the heart of trusted collaboration, it’s critical that you have the ability to powerfully and precisely manage your files to ensure they’re always in the right hands. That’s why we’re giving admins more choices when it comes to setting rules for how files can be shared with trust rules for Drive.
