Platform provider

Google (Alphabet Inc.)

Google, the largest business of Nasdaq-listed Alphabet, sells Gemini Enterprise and Gemini in Google Workspace as AI assistants and agent platforms.

2 offerings in the directory Last verified October 21, 2026

Function

Across functions

Ownership: Subsidiary
Alphabet's Form 10-K for 2025 refers to Google LLC as a subsidiary of Alphabet Inc., whose Class A common stock (GOOGL) is listed on the Nasdaq Global Select Market.
Headquarters: United States
SEC reporting: Yes
Audit firm: No
Website: cloud.google.com
Subprocessor list: Not stated
Contract terms: Not stated

Offering · Software

Gemini Enterprise

Directory recordLast verified October 21, 2026Compare with othersBuild questions for this vendor

Google describes Gemini Enterprise as an intranet search, AI assistant and agentic platform with prebuilt connectors to applications such as Confluence, Jira, SharePoint and ServiceNow, giving permissions-aware access to company information.

Alphabet's 10-K describes it as a platform for teams to discover, create, share and run AI agents through a chat interface.

It comes in Business, Standard, Plus, Pay-as-you-go and Frontline editions, with no-code agent building in preview and enterprise-grade security and compliance excluded from the Business edition.

Google says business data, including prompts and outputs, is never used to train Google models.

Where it fits

CoE analysis Fits organizations that want one search and agent layer across Google and non-Google systems such as SharePoint, Jira and ServiceNow.

CoE analysis Edition choice decides the security posture: the edition comparison marks enterprise-grade security and compliance as not included in Business, and customer-managed keys and Access Transparency are not supported in the global region, so the edition and region belong in the security review.

Evidence

Independent outcomes: None found in the sources read.
Sources read: Vendor-stated 7
Independent market evidence None read
Independently verified outcomes None read
Pricing 1
Known limitations 1
Coverage: Directory record
Last verified: October 21, 2026

Security and control

Single sign-on: Supported
Workforce Identity Federation is a supported authentication framework (read here as single sign-on support, interpreted); protocols are not named. Applies to the Standard, Plus, Pay-as-you-go and Frontline documentation set; the Business edition's documentation was not read.
User provisioning: Not stated
Not described on the pages read.
Role-based access: Not stated
See the per-offering entries.
Administrator controls for AI: Not stated
Per-project budget caps pause the agent instead of overspending; basic agent governance and administration is listed in every edition except Frontline. Whether each AI feature can be switched off on its own is not stated.
Audit logs: Covers AI actions: Yes
The product page says Gemini leaves a complete audit trail; log content, export and retention are not described on the pages read.
Certifications: Other
The agentic AI service formerly known as Agentspace, part of the Standard and Plus editions, has 'many of' HIPAA, FedRAMP, ISO 27001, 27017, 27018, 27701, SOC 1, 2, 3, PCI DSS and BSI C5:2020; Google directs readers to each certification's page to confirm coverage. Antigravity in Gemini Enterprise is not covered by ISO or SOC certifications. Enterprise-grade security and compliance is not part of the Business edition. Scope: Standard and Plus editions; the Business edition's documentation was not read.
Data retention: Deletion on request: Yes
Gemini Enterprise deletes user-requested data within 60 days (Standard, Plus, Pay-as-you-go and Frontline documentation set; Business edition not read).
Data residency: Data residency is supported with limitations; customer-managed encryption keys are limited to US and EU multi-region APIs; these controls do not apply when Grounding with Google Search is enabled; CMEK and Access Transparency are not supported in the global region. Scope: Standard and Plus editions; the Business edition's documentation was not read.
Training on customer data: Not used
Scope: Vendor models
Where stated: FAQ
Product page FAQ: prompts, outputs and model tuning are never used to train Google models or models for any other customer.

AI features

As the vendor or firm describes them. Notes in small print record what the sources leave open.

Permission-aware enterprise search and assistant
Single multimodal search across connected sources with permissions-aware access, conversational assistance and answers to complex questions.
Kind
General-purpose assistant
Suggests or acts
Suggests
Who controls it
Customer IT
Availability
Generally available
Control: Access follows each user's permissions in the connected sources; the configuring role is not described in the claims cited.
Custom no-code agents
Build and publish custom agents with Gemini Enterprise no-code tools.
Kind
Agents and automated actions
Suggests or acts
Not stated
Who controls it
Individual user, Customer IT
Availability
Preview
Control: Built by users in Business, Standard, Plus and Pay-as-you-go editions.
Gemini agent for delegated work
Runs under each person's existing permissions and leaves a complete audit trail; per-project budget caps pause the agent instead of overspending; multi-step background tasks.
Kind
Agents and automated actions
Suggests or acts
Acts
Who controls it
Customer IT
Availability
Preview
Control: Budget caps set per project.

Questions to ask

For this offering

Which edition would we license, and which certifications and security controls apply to that edition and region?
Is our location supported for customer-managed encryption keys, given they are limited to US and EU multi-region APIs?
Which features we have been shown are still in early access or preview, and when would they reach general availability?
What will our edition cost for our seat count and term, and how is Pay-as-you-go consumption metered?
What does the audit trail record when the agent acts in a connected third-party application?

From the diligence question set

Build questions for this vendor

Offering · Platform module

Gemini in Workspace and the Gemini app

Directory recordLast verified October 21, 2026Compare with othersBuild questions for this vendor

Alphabet's 10-K describes Gemini for Google Workspace as bringing Google's AI-powered agents into Gmail, Docs, Sheets and more, and Google now treats the Gemini app as a core Workspace service for most editions.

Gemini draws on Gmail, Drive, Calendar and Chat through Workspace Intelligence, follows existing Workspace permissions, and checks for threats before it performs an action.

Google says prompts are customer data under the Cloud Data Processing Addendum and that its Workspace Service Specific Terms bar training on customer data without permission.

Admins can turn the Gemini app on or off and, in supported editions, switch Gemini features on or off in Gmail, Drive, Docs, Meet and Chat, and Workspace audit logs cover Gemini interactions.

Where it fits

CoE analysis Fits organizations on Google Workspace that want an assistant inside the apps people already use, governed by existing Workspace admin settings and audit logs.

CoE analysis Gemini is on by default as a core service, so the rollout decision is mostly about which apps and data sources to switch off and how long conversations are kept, where Google's own page gives two different limits.

What it does

Offering type: Platform module
Workflow areas: Enterprise assistant
Customer size: Not stated

AI

Kind of AI: Built into the platform
General-purpose assistant
Agents and automated actions
Suggests or acts: Suggests and acts
Availability: Generally available
Google describes the Gemini app as a core Workspace service for most Workspace editions, turned on by default; Gemini features in Gmail, Drive, Docs, Meet and Chat are available in supported editions.
Models named: Google

Control

Who controls it: Customer IT
Individual user

Commercial

Pricing model: Not stated
Public price: Not stated

Evidence

Independent outcomes: None found in the sources read.
Sources read: Vendor-stated 10
Independent market evidence None read
Independently verified outcomes None read
Pricing None read
Known limitations None read
Coverage: Directory record
Last verified: October 21, 2026

Security and control

Single sign-on: Not stated
No organization-wide statement read; see the per-offering entries.
User provisioning: Not stated
Not described on the pages read.
Role-based access: Not stated
See the per-offering entries.
Administrator controls for AI: Per feature
The Gemini app is on by default and admins can disable it; for supported editions admins enable or disable Gemini features in Gmail, Drive, Docs, Meet and Chat, and choose which services Workspace Intelligence searches.
Audit logs: Covers AI actions: Yes
Workspace audit logs track user activity and interactions with Gemini in the Gemini app and Workspace apps, through the Reporting API and investigation tools; retention not stated on the page.
Certifications: Other
Google says Gemini has attained SOC 1, 2 and 3; report type and period not stated. Gemini Notebook and Gemini in Chrome are excluded.
ISO 27001
Gemini (ISO/IEC 27001, with 27701, 27017, 27018 and ISO 9001); not Gemini Notebook or Gemini in Chrome.
ISO 42001
Gemini; not Gemini Notebook or Gemini in Chrome.
FedRAMP
Gemini has FedRAMP High authorization; not Gemini Notebook or Gemini in Chrome.
Data retention: Prompts and outputs: Gemini in Workspace prompts and responses: 90 days to indefinite, as admins determine. Gemini app: up to 36 months per the retention table, or indefinitely per the controls text (see conflicts); default auto-delete 18 months.
Users can manually delete Gemini in Workspace conversations unless admins prohibit it.
Data residency: Not stated
Not stated for Gemini in the Privacy Hub sections claimed.
Training on customer data: Not used
Scope: Vendor models
Where stated: Contract
Prompts are customer data under the Cloud Data Processing Addendum; the Training Restriction section of the Workspace Service Specific Terms bars training on customer data without prior permission or instruction. The Service Specific Terms themselves were not read; the statement is from the Privacy Hub.

AI features

As the vendor or firm describes them. Notes in small print record what the sources leave open.

Gemini in Gmail, Drive, Docs, Meet and Chat
Gemini features and the Gemini side panel in Workspace apps.
Kind
Built into the platform
Suggests or acts
Suggests
Who controls it
Customer IT, Individual user
Availability
Generally available
Control: Admins enable or disable Gemini features per Workspace service for supported editions.
Gemini app (with Workspace Intelligence)
Chat assistant that retrieves context from Gmail, Drive, Calendar and Chat under the user's permissions; admins choose which services it actively searches.
Kind
General-purpose assistant
Suggests or acts
Suggests
Who controls it
Customer IT
Availability
Generally available
Control: On by default as a core service; admins can disable it and set conversation retention.
Gemini actions in Workspace
When prompted to perform an action, Gemini checks for threats first and excludes malicious content or blocks the action.
Kind
Agents and automated actions
Suggests or acts
Acts
Who controls it
Individual user
Availability
Not stated
Control: Prompted by the user.

Unclear or conflicting statements

Where the sources are unclear or disagree, both statements are shown with their links.

Maximum retention of Gemini app conversations

Statement A

Privacy Hub retention table: Gemini app prompts and responses are kept up to 36 months, as determined by admins.

knowledge.workspace.google.com/admin/generative-ai/generative-ai-in-google-workspace-privacy-hub

Statement B

Same page, retention controls: admins can set automated retention periods such as 3 months, 18 months or 3 years, or retain conversations indefinitely for the organization.

knowledge.workspace.google.com/admin/generative-ai/generative-ai-in-google-workspace-privacy-hub

Recorded under D-143; not resolved.

Both statements are published as found; CoE draws no inference about which governs.

Questions to ask

For this offering

Which Workspace editions do we hold, and which Gemini features and certifications apply to each of them?
What is the longest retention our admins can set for Gemini app conversations: 36 months or indefinite?
Have we turned off Gemini Notebook or Gemini in Chrome where we need ISO, SOC or FedRAMP coverage?
Which Gemini actions can change or send content, and what do the Workspace audit logs record for them?
Which Workspace data sources should Workspace Intelligence not search, and what features stop working if we turn them off?

From the diligence question set

Build questions for this vendor

Gemini Enterprise

What it does

AI

Control

Commercial

Evidence

Security and control

AI features

Permission-aware enterprise search and assistant

Custom no-code agents

Gemini agent for delegated work

Questions to ask

Gemini in Workspace and the Gemini app

What it does

AI

Control

Commercial

Evidence

Security and control

AI features

Gemini in Gmail, Drive, Docs, Meet and Chat

Gemini app (with Workspace Intelligence)

Gemini actions in Workspace

Unclear or conflicting statements

Questions to ask