Data

Gemini in Google Workspace and the GDPR: AI training, data location and DPA

Business Standard: Doesn't train on your data. Limited EU hosting · DPA in the terms.

Vendor: GoogleAssistantsChecked on How we check

Verdict

Is Gemini in Google Workspace GDPR compliant?

Business Standard

Business

Doesn't train on your data

Limited EU hosting · DPA in the terms

Price: €13.60 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Gemini in Google Workspace train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Workspace does not use customer data to train models without the customer's permission or instruction

Source: knowledge.workspace.google.comPrivacy Hub (last updated 6 Oct 2026)Checked on

Location

Where does Gemini in Google Workspace store your data?

EU hosting on this plan

Checked

Limited EU hosting.

Partial on this plan: 'Fundamental' data regions pin Gemini prompts/responses at rest to Europe; processing in use stays in-region only with Enterprise data regions (Enterprise Plus or add-on) or Assured Controls

Source: knowledge.workspace.google.comEditions table and covered-data table, footnotes (updated 13 Oct 2026)Checked on

Contract

Does Gemini in Google Workspace sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. Cloud Data Processing Addendum (CDPA) covers Gemini prompts and responses

Source: knowledge.workspace.google.comPrivacy Hub, CDPA statementsChecked on

Processors

Who else handles Gemini in Google Workspace data?

Sub-processors (companies that handle the data for them)

Checked

14 listed.

Public. 14 third-party entities (all support firms) for Workspace core services, plus 45 of their affiliates and 45 Google affiliates; last modified 23 Jul 2026

Source: workspace.google.comThird-Party Subprocessors section and sub-tablesChecked on

EU–US Data Privacy Framework

Checked

On the list.

Active (EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Google LLC'Checked on

Retention

How long does Gemini in Google Workspace keep your data?

How long data is kept

Checked

Set by admins. Gemini in Docs, Gmail and other apps: prompts and responses kept 90 days to indefinitely; Gemini app: up to 36 months, or up to 72 hours when conversation history is off

Source: knowledge.workspace.google.comTable 'Gemini data retention' and FAQ 'How long are prompts saved?'Checked on

Security

Which certifications and admin controls does Gemini in Google Workspace have?

Security certifications

Checked

SOC 1/2/3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018 and 42001, FedRAMP High; supports HIPAA workloads. Gemini Notebook and Gemini in Chrome are not yet covered

Source: knowledge.workspace.google.comFAQ 'Does using Gemini impact any existing compliance certifications?' and the Notebook/Chrome FAQsChecked on

Admin controls for AI

Checked

Yes. The Gemini app is on by default; admins can turn it off for users and switch Gem sharing, conversation sharing, Gemini Notebook and beta features on or off

Source: knowledge.workspace.google.comFAQ 'As an admin, can I turn Gemini on and off for users?' and the admin settings listChecked on

Price

What does Gemini in Google Workspace cost?

Price, as shown in Germany

Checked

€13.60 / user / mo.

EUR 13.60 per user/month with 1-year commitment; EUR 16.20 flexible

Source: workspace.google.comBusiness Standard card, annual switch on/offChecked on

The vendor doesn't say: data location.

Alternatives

Gemini in Google Workspace alternatives that don't train on your data

Other assistants tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Langdock

    Business · €29.00 / user / mo

    Says it doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Microsoft 365 Copilot

    Business add-on · €18.20 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • nele.ai

    usage-based credit subscription · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Proton Lumo

    Professional · €11.99 / user / mo

    Says it doesn't train on your dataData in the EU (vendor says) · DPA on request

    ✓✓✓✓✓

  • Gemini Notebook

    Workspace Business Standard (+1) · €13.60 / user / mo

    Doesn't train on your dataEU hosting not documented · DPA in the terms

    ✓?✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.