- Deployment
- hosted
- Hq Country
- United States
- Hq City
- Mountain View
- Ownership
- public
- Founded
- 1998
- Training Default
- never
- Residency Options
- EU (Netherlands, France, Germany, Belgium), UK, US, Canada, Japan, Singapore, South Korea, Google Distributed Cloud (air-gapped)
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- gpai-systemic
- Certs
- ISO 42001, ISO 27001, SOC 2 Type II, FedRAMP High, CSA STAR
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- Vertex AI / paid Gemini API: not used for training; abuse logging retained a limited period (day-count not published); ZDR-equivalent contractual terms for eligible enterprise.
- Retention Exceptions
- Prohibited-Use-Policy abuse logging on the paid API. FREE Gemini API tier and the consumer Gemini app DO use content to improve products with human review — never use the free tier for regulated data.
- Subprocessors
- Google-owned infrastructure
- Transfer Mechanism
- sccs+dpf
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- EU data residency + ISO 42001 pass; US CLOUD Act jurisdiction remains. Irish DPC opened a DPIA inquiry into Google's PaLM 2 training (2024-09-12). Free-tier training default is disqualifying for regulated workloads — use Vertex/paid only.
- Last Policy Change
- 2024-12-19T00:00:00.000Z
- Change Summary
- Google Cloud achieved accredited ISO/IEC 42001:2023 (AI management system) certification covering Vertex/Gemini enterprise.
- Prior Value
- No dedicated AI-management-system certification.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- medium
- Subprocessors Claim Basis
- inferred
- Subprocessors Confidence
- low
- Residency Class
- eu-selectable
- Portability / Exit Path
- serves-open-models
- Subprocessor Jurisdiction
- non-eu
