Data

Google Chat and the GDPR: AI training, data location and DPA

Google Workspace Business Standard: Doesn't train on your data. EU hosting available · DPA in the terms.

Vendor: Google LLCWorkspace and projectsChecked on How we check

Verdict

Is Google Chat GDPR compliant?

Google Workspace Business Standard

Business

Doesn't train on your data

EU hosting available · DPA in the terms

Price: €13.60 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Google Chat train on your data?

Trains on your data by default?

Checked

Doesn't train on your data.

No. Workspace does not use customer data, including prompts, to train Google's generative AI models without the customer's prior permission or instruction.

Vendor's wording: “Workspace does not use customer data for training models without customer's prior permission or instruction.”

Source: support.google.comPrivacy hub: Model training and data usage, 'Does Google use my data (including prompts) to train generative AI models?'Checked on

Location

Where does Google Chat store your data?

Where data is stored by default

Checked

Not a single named country: data is spread over Google data centers around the globe, some outside the EEA, and Google says it cannot name the exact data center.

Vendor's wording: “Google's infrastructure is strategically distributed across multiple data centers around the globe.”

Source: support.google.comHow Google protects your organization's security and privacy, 'Where does Google store my data?'Checked on

EU hosting on this plan

Checked

EU hosting available.

Yes. Business Standard is a supported edition for data regions: admin can choose European Union or United States for covered Workspace data at rest. Business Starter is not supported.

Vendor's wording: “Supported editions for this feature: Frontline Starter, Frontline Standard, and Frontline Plus; Business Standard and Business Plus;”

Source: support.google.comData regions, supported editionsChecked on

Contract

Does Google Chat sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA in the terms.

Yes. The Cloud Data Processing Addendum is incorporated into the Workspace agreement and takes effect when the customer accepts it (opt-in online in the Admin console).

Vendor's wording: “This Cloud Data Processing Addendum (including its appendices, the “Addendum”) is incorporated into the Agreement(s) (as defined below) between Google and Customer.”

Source: workspace.google.comCloud Data Processing Addendum, 1. Overview and Addendum Effective DateChecked on

Processors

Who else handles Google Chat data?

Sub-processors (companies that handle the data for them)

Checked

Published.

Yes, public: https://workspace.google.com/terms/subprocessors/ . Core Services table has 14 third-party entities (support and risk-review outsourcers) and 45 Google group entities (59 in total, plus listed affiliates of the third parties). No AI model providers listed.

Vendor's wording: “Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Workspace Core Services”

Source: workspace.google.comSubprocessors page: Third-Party Subprocessors and Google Group Subprocessors (Core Services)Checked on

EU–US Data Privacy Framework

Checked

On the list.

Active (Google LLC; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Google LLC'Checked on

Retention

How long does Google Chat keep your data?

How long data is kept

Checked

Kept until deleted. Admins set Gemini chat retention (auto-delete after e.g. 3 months, 18 months or 3 years, or keep indefinitely). Google deletes within 180 days after a customer deletion and after up to 30 days' recovery when the term ends.

Vendor's wording: “Customer instructs Google to delete all remaining Customer Data (including existing copies) from Google’s systems at the end of the Term.”

Source: workspace.google.comCloud Data Processing Addendum, 6. Data DeletionChecked on

Security

Which certifications and admin controls does Google Chat have?

Security certifications

Checked

9 named for Gemini in Workspace: SOC 1, SOC 2, SOC 3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018 and 42001 (plus FedRAMP High).

Vendor's wording: “Gemini has attained SOC 1/2/3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018, and 42001 certifications.”

Source: support.google.comPrivacy hub: 'Does using Gemini impact any existing compliance certifications'Checked on

Admin controls for AI

Checked

Yes. Admins can turn the Gemini app off for users, and on supported editions switch Gemini features and the side panel on or off in Gmail, Drive, Docs, Meet and Chat.

Vendor's wording: “Admins manage access to the Gemini app and can choose to disable the service.”

Source: support.google.comPrivacy hub: 'As an admin, can I turn Gemini on and off for users?'Checked on

Price

What does Google Chat cost?

Price, as shown in Germany

Checked

€13.60 / user / mo.

€13.60 per user/month, excluding tax (annual-commitment price shown; plans billed monthly; first-3-months 50% promotion also shown). Chat is included in every Workspace plan.

Vendor's wording: “Feb 2, 2027 - Onwards For all users €13.60 • Price is per user/month and does not include tax”

Source: workspace.google.comPricing page, Business Standard cardChecked on

Alternatives

Google Chat alternatives that don't train on your data

Other workspace and projects tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • Miro

    Business · €20 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • monday.com

    Pro · €19 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Teamwork.com

    Basics · $9.99 / user / mo

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

  • Wrike

    Business · $25 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Asana

    Advanced · $24.99 / user / mo

    Doesn't train on your dataEU hosting only on higher plans · DPA in the terms

    ✓✕✓✓✓

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.