Google Workspace Business Standard
BusinessDoesn't train on your data
EU hosting available · DPA in the terms
Price: €13.60 / user / mo
Google Workspace Business Standard: Doesn't train on your data. EU hosting available · DPA in the terms.
Vendor: Google LLCWorkspace and projectsChecked on How we check
Doesn't train on your data
EU hosting available · DPA in the terms
Price: €13.60 / user / mo
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Doesn't train on your data.
No. Workspace does not use customer data, including prompts, to train Google's generative AI models without the customer's prior permission or instruction.
Vendor's wording: “Workspace does not use customer data for training models without customer's prior permission or instruction.”Source: support.google.comPrivacy hub: Model training and data usage, 'Does Google use my data (including prompts) to train generative AI models?'Checked on
Not a single named country: data is spread over Google data centers around the globe, some outside the EEA, and Google says it cannot name the exact data center.
Vendor's wording: “Google's infrastructure is strategically distributed across multiple data centers around the globe.”Source: support.google.comHow Google protects your organization's security and privacy, 'Where does Google store my data?'Checked on
EU hosting available.
Yes. Business Standard is a supported edition for data regions: admin can choose European Union or United States for covered Workspace data at rest. Business Starter is not supported.
Vendor's wording: “Supported editions for this feature: Frontline Starter, Frontline Standard, and Frontline Plus; Business Standard and Business Plus;”Source: support.google.comData regions, supported editionsChecked on
DPA in the terms.
Yes. The Cloud Data Processing Addendum is incorporated into the Workspace agreement and takes effect when the customer accepts it (opt-in online in the Admin console).
Vendor's wording: “This Cloud Data Processing Addendum (including its appendices, the “Addendum”) is incorporated into the Agreement(s) (as defined below) between Google and Customer.”Source: workspace.google.comCloud Data Processing Addendum, 1. Overview and Addendum Effective DateChecked on
Published.
Yes, public: https://workspace.google.com/terms/subprocessors/ . Core Services table has 14 third-party entities (support and risk-review outsourcers) and 45 Google group entities (59 in total, plus listed affiliates of the third parties). No AI model providers listed.
Vendor's wording: “Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Workspace Core Services”Source: workspace.google.comSubprocessors page: Third-Party Subprocessors and Google Group Subprocessors (Core Services)Checked on
On the list.
Active (Google LLC; EU-US DPF, Swiss-US DPF, UK Extension)
Source: dataprivacyframework.govSearch 'Google LLC'Checked on
Kept until deleted. Admins set Gemini chat retention (auto-delete after e.g. 3 months, 18 months or 3 years, or keep indefinitely). Google deletes within 180 days after a customer deletion and after up to 30 days' recovery when the term ends.
Vendor's wording: “Customer instructs Google to delete all remaining Customer Data (including existing copies) from Google’s systems at the end of the Term.”Source: workspace.google.comCloud Data Processing Addendum, 6. Data DeletionChecked on
9 named for Gemini in Workspace: SOC 1, SOC 2, SOC 3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018 and 42001 (plus FedRAMP High).
Vendor's wording: “Gemini has attained SOC 1/2/3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018, and 42001 certifications.”Source: support.google.comPrivacy hub: 'Does using Gemini impact any existing compliance certifications'Checked on
Yes. Admins can turn the Gemini app off for users, and on supported editions switch Gemini features and the side panel on or off in Gmail, Drive, Docs, Meet and Chat.
Vendor's wording: “Admins manage access to the Gemini app and can choose to disable the service.”Source: support.google.comPrivacy hub: 'As an admin, can I turn Gemini on and off for users?'Checked on
€13.60 / user / mo.
€13.60 per user/month, excluding tax (annual-commitment price shown; plans billed monthly; first-3-months 50% promotion also shown). Chat is included in every Workspace plan.
Vendor's wording: “Feb 2, 2027 - Onwards For all users €13.60 • Price is per user/month and does not include tax”Source: workspace.google.comPricing page, Business Standard cardChecked on
Other workspace and projects tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Business · €20 / user / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
Pro · €19 / user / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
Basics · $9.99 / user / mo
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✓
Business · $25 / user / mo
Doesn't train on your dataEU hosting available · DPA in the terms
✓✓✓✓✓
Advanced · $24.99 / user / mo
Doesn't train on your dataEU hosting only on higher plans · DPA in the terms
✓✕✓✓✓
We design and build what your team is missing, around the way you already work and the data rules you set.