中国豪华SUV开创者 WEY品牌SUV将上海车展上市

As part of your migration to the cloud, you may need to validate our compliance documentation, certifications, and controls. Google Cloud creates and shares mappings of our industry-leading security, privacy, and compliance controls to standards from around the world. We also regularly undergo independent verification—achieving certifications, attestations, and audit reports to help demonstrate compliance.

USA

Latin America

EMEA

Asia Pacific

Regulatory Considerations for US Financial Institutions Migrating to Google Cloud

Trusting your data with Google Cloud

Government Requests for Cloud Customer Data

Trusting your data with Google Workspace

Data Portability and Interoperability

An independent third-party auditor has granted a formal certification, attestation, or audit report based on an assessment that affirms our compliance with these offerings.

Global?

Cloud Computing Compliance Controls Catalog (C5) | CSA | GSMA SAS-SM | Higher Education Cloud Vendor Assessment Tool (HECVAT) | ISO 9001:2015 | ISO 22301:2019 & BS EN ISO 22301:2019 | ISO 50001:2018 | ISO/IEC 27001 | ISO/IEC 27017 | ISO/IEC 27018 | ISO/IEC 27701 | ISO/IEC 42001 | PCI 3DS Core Security Standard | PCI DSS | PCI PIN Security | SOC 1 | SOC 2 | SOC 3 | SWIFT on Google Cloud | Uptime Institute's Tier Standards | VPAT (WCAG, U.S. Section 508, EN 301 549)

Cloud service providers can’t provide formal certification of our customers compliance with these laws and regulations. To help support our customers, we review these laws and regulations and where possible provide guidance documents, mappings, and papers that outline our technical capabilities and legal commitments.?

Global and North America

GxP |?California Consumer Privacy Act (CCPA) | COPPA (U.S.)?| Export Administration Regulations (EAR) | FERPA (U.S.) | FINRA (US) | Google Cloud Data Processing Addendum Mapping - U.S. State Privacy Laws | HIPAA | IRS 1075 |?International Traffic in Arms Regulations (ITAR) | GLBA | OSFI (Canada) | FG16/5 - FCA | NERC CIP | PHIPA (Canada) | StateRAMP | PIPEDA (Canada)?| Québec (Canada) Law 25 / la Loi 25 | US Federal Banking Agencies | U.S. Defense Federal Acquisition Regulation Supplement (DFARS)

EMEA

ACPR (France) | BaFin Cloud Outsourcing Guidance | Banco de Espa?a?|?Banco de Portugal | Bank of Italy?|?BRSA (Turkey) |?BSI Critical Infrastructure (KRITIS) |BWG (Austria)?| Central Bank of Ireland (Ireland) | CSSF (Luxembourg)?|?De Nederlandsche Bank (the Netherlands) | EU AI Act | EU DORA | European Union’s Digital Markets Act | EU Solvency II | EU Standard Contractual Clauses | FINMA (Switzerland) |?FSA (Denmark) | GDPR | Google Cloud & the EU Network and Information Systems Directive (NIS2) | ISO 14001 | Israel’s Privacy Protection Authority |?KNF (Poland) |?MaRisk AT 9 Outsourcing | PRA (UK) | revFADP (Switzerland) | South Africa POPI | SFSA (Sweden) | Telecoms Security Act (UK) | VAG (Austria)| SYSC 8 Outsourcing - FCA Handbook | UK CHECK

Our products, technical capabilities, guidance documents, and legal commitments help our customers map to these frameworks and alignments. These offerings may not require formal certification or attestation, though we may rely on our certifications, attestations, and reports to help our customers map to these frameworks and alignments.

Global

Bitsight | Center for Internet Security (CIS) Benchmarks | CyberGRX | ISO/IEC 27110 | Know Your Third Party (KY3P) Report | MVSP | ProcessUnity Global Risk Exchange | Standardized Information Gathering (SIG) Questionnaire | USDM Life Sciences?| Whistic

Strengthening Operational Resilience in Financial Services by Migrating to Google Cloud

Google Workspace Data Subject Requests (DSR) Guide

Insights into the German Healthcare Industry