What’s changing
Today we announced the beta for Google Workspace Client-side encryption, which is available to Google Workspace Enterprise Plus and Google Workspace Education Plus customers. The beta will be available for Google Drive, Docs, Sheets, and Slides, with support for all file types in Drive including Office files, PDFs, and more. We’re committed to a roadmap that enables Client-side encryption across Google Workspace, including Gmail, Meet, and Calendar. Support for Google Meet is coming in the fall. Follow the Google Workspace Updates blog to learn when that’s available.
The beta will start rolling out in the next few weeks, but eligible customers can now apply for the beta here.
Who’s impacted
Admins
Why it’s important
Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. But with Client-side encryption, we’re taking this a step further by giving customers direct control of encryption keys and the identity provider used to access those keys. This can help you strengthen the confidentiality of your data while helping to address a broad range of data sovereignty and compliance needs.
When using Client-side encryption, customer data is indecipherable to Google. Customers can create a fundamentally stronger privacy posture, whether that’s to comply with regulations like ITAR and CJIS or simply to better protect the privacy of their confidential data
Read our announcement blog post to learn more about this beta and our plans for Client-side encryption across Google Workspace.
Additional details
To enable Client-side encryption, you’ll choose a key access service partner: Flowcrypt, Futurex, Thales, or Virtru. Each of these partners have built tools in accordance with Google’s specifications and provide both key management and access control capabilities. Your partner of choice holds the key to decode encrypted Google Workspace files, and Google cannot access or decipher these files without this key. If you prefer to build or integrate your own in-house key services, we will be publishing the key access service API specifications that can be used with Client-side encryption later this year.
Getting started
- Admins: Use our Help Center to learn more and apply for the beta here.
- End users: No end-user impact.
Rollout pace
- The beta will start rolling out in the next few weeks, but eligible customers can now apply for the beta here. You’ll get more details via email a few weeks after registering your interest in the beta via the form.
Availability
- Available to Enterprise Plus and Education Plus customers
- Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Enterprise Standard, Education Fundamentals, Frontline, and Nonprofits, as well as G Suite Basic and Business customers.