Google (Gemini / Cloud AI)
This tracker records only what each vendor has published on its own public pages. It is not an assessment, audit, certification or endorsement. Vendors change their documentation — always verify directly before making a procurement decision.
Data storage region
CAPR C1 vendor questionSummaryChecked 25 Sept 2026
Customer-selected Google Cloud location for data at rest (Gemini Enterprise Agent Platform data residency)
“When you store data on Agent Platform (such as custom model weights or metadata), it remains physically stored in the specific Google Cloud location you chose.”docs.cloud.google.com
Data processing region
CAPR C1 vendor questionSummaryChecked 25 Sept 2026
Customer choice of jurisdictional multi-region endpoints (e.g. United States, European Union) or regional endpoints; per-model regional ML processing table includes Australia (australia-southeast1)
“When you use jurisdictional endpoints, ML processing stays within that specific geographical region (such as the United States or the European Union).”docs.cloud.google.com
Model provenance
SummaryChecked 25 Sept 2026
Google's own Gemini model family; Google states Gemini for Google Cloud does not use prompts or responses to train its models
“Gemini doesn't use your prompts or its responses as data to train its models.”docs.cloud.google.com
Subprocessors
CAPR C2 vendor questionSummaryChecked 25 Sept 2026
Third-party and Google-group subprocessor lists published for Google Cloud Platform services
“Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Cloud Platform Services.”cloud.google.com
Certifications
CAPR C6 vendor questionSummaryChecked 25 Sept 2026
Google Cloud compliance offerings incl. ISO/IEC 27001, 27017, 27018, 27701, 42001, SOC 1/2/3, PCI DSS
“ISO/IEC 27001 | ISO/IEC 27017 | ISO/IEC 27018 | ISO/IEC 27701 | ISO/IEC 42001 | PCI 3DS Core Security Standard | PCI DSS | PCI PIN Security | SOC 1 | SOC 2 | SOC 3”cloud.google.com
TGA status
SummaryChecked 13 Aug 2026
Not found on public pages
We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
docs.cloud.google.comPMS integrations
SummaryChecked 13 Aug 2026
Not found on public pages
We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
docs.cloud.google.comANZ entity
SummaryChecked 25 Sept 2026
Google Australia Pty Ltd listed as Google Cloud contracting entity for Australia; Google New Zealand Limited for New Zealand
“Google Australia Pty Ltd.”cloud.google.com
Support hours
SummaryChecked 13 Aug 2026
Not found on public pages
We could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
cloud.google.comLabels such as CAPR C1 link to the vendor question in CAPR, our buyer framework, that each field informs. They are cross-references, not ratings.
Common questions
What Google (Gemini / Cloud AI) publishes — answered from the record
- Where does Google (Gemini / Cloud AI) store patient data?
- SummaryChecked 25 Sept 2026Customer-selected Google Cloud location for data at rest (Gemini Enterprise Agent Platform data residency)
“When you store data on Agent Platform (such as custom model weights or metadata), it remains physically stored in the specific Google Cloud location you chose.”
docs.cloud.google.com - Where does Google (Gemini / Cloud AI) process data?
- SummaryChecked 25 Sept 2026Customer choice of jurisdictional multi-region endpoints (e.g. United States, European Union) or regional endpoints; per-model regional ML processing table includes Australia (australia-southeast1)
“When you use jurisdictional endpoints, ML processing stays within that specific geographical region (such as the United States or the European Union).”
docs.cloud.google.com - Which AI models does Google (Gemini / Cloud AI) use?
- SummaryChecked 25 Sept 2026Google's own Gemini model family; Google states Gemini for Google Cloud does not use prompts or responses to train its models
“Gemini doesn't use your prompts or its responses as data to train its models.”
docs.cloud.google.com - What certifications does Google (Gemini / Cloud AI) publish?
- SummaryChecked 25 Sept 2026Google Cloud compliance offerings incl. ISO/IEC 27001, 27017, 27018, 27701, 42001, SOC 1/2/3, PCI DSS
“ISO/IEC 27001 | ISO/IEC 27017 | ISO/IEC 27018 | ISO/IEC 27701 | ISO/IEC 42001 | PCI 3DS Core Security Standard | PCI DSS | PCI PIN Security | SOC 1 | SOC 2 | SOC 3”
cloud.google.com - Which subprocessors does Google (Gemini / Cloud AI) name?
- SummaryChecked 25 Sept 2026Third-party and Google-group subprocessor lists published for Google Cloud Platform services
“Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Cloud Platform Services.”
cloud.google.com - What does Google (Gemini / Cloud AI) publish about TGA status?
- Not found on public pagesWe could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
- Which practice management systems does Google (Gemini / Cloud AI) list as integrations?
- Not found on public pagesWe could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
- Which Australian or New Zealand entity does Google (Gemini / Cloud AI) contract through?
- SummaryChecked 25 Sept 2026Google Australia Pty Ltd listed as Google Cloud contracting entity for Australia; Google New Zealand Limited for New Zealand
“Google Australia Pty Ltd.”
cloud.google.com - What support hours does Google (Gemini / Cloud AI) publish?
- Not found on public pagesWe could not find this on the vendor's public pages as at the check date. This is not a statement that the vendor lacks the capability or has not disclosed it elsewhere.
Answered from what the vendor publishes on its own public pages, or from an official register where noted, as at the check date shown. Not an assessment, audit, certification or endorsement.
Right of reply
Something wrong or out of date?
Are we missing something, or has this changed? Vendors and their representatives can submit a correction, and we note each change and credit the source. We review every correction request and update the entry when the source supports it.
Submit a correction