Google Drive and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. Google's Workspace Service Specific Terms (12.11) say it will not use Customer Data to train or fine-tune its generative AI models behind Workspace's generative AI services without the customer's prior permission or instruction.

Vendor's wording: “Google will not use Customer Data to train or fine-tune any of its generative artificial intelligence models supporting the Google Workspace Generative AI Services without Customer's prior permission or instruction.”

Source: workspace.google.com12.11 Training RestrictionSecond source: support.google.comChecked on 19 October 2026

No single default country: Google may process customer data in any country where Google or its subprocessors have facilities, unless an admin sets a data region (US or Europe).

Vendor's wording: “Customer Data may be processed in any country where Google or its Subprocessors maintain facilities.”

Source: workspace.google.comSection 10.1 Data Storage and Processing FacilitiesChecked on 19 October 2026

EU hosting available.

Yes. An admin can set a data region of Europe (the EU) for covered Workspace data at rest; Business Standard is a listed edition. Choosing the region for processing too needs Enterprise Plus or Frontline Plus. Gemini Notebook is not covered.

Vendor's wording: “Your location options are the United States, European Union (labeled Europe in the Google Admin console), or No preference.”

Source: support.google.comChoose a geographic location for your dataChecked on 19 October 2026

DPA in the terms.

Yes. The Cloud Data Processing Addendum is incorporated into the Google Workspace agreement between Google and the customer, so it applies as part of the terms.

Vendor's wording: “is incorporated into the Agreement(s) (as defined below) between Google and Customer.”

Source: workspace.google.comCloud Data Processing Addendum, introChecked on 19 October 2026

Published.

Yes, public at https://workspace.google.com/terms/subprocessors/ : 108 rows (14 third-party support and security firms, 49 of their affiliates, 45 Google group entities). No outside AI model provider appears in it.

Vendor's wording: “Google and its affiliates engage the third-party entities in the table below to perform limited activities in connection with the Google Workspace Core Services and Cloud Identity Services.”

Source: workspace.google.comThird-Party SubprocessorsChecked on 19 October 2026

On the list.

Active (Google LLC; EU-US DPF, Swiss-US DPF, UK Extension)

Source: dataprivacyframework.govSearch 'Google LLC'Checked on 19 October 2026

Gemini in Workspace chats are kept 90 days to indefinitely as admins set; Gemini app chats up to 36 months as admins set; users can delete chats unless admins block it. Deleted data is removed within 180 days; after the term ends, 30-day recovery then deletion within 180 days.

Vendor's wording: “90 days to indefinite, as determined by admins”

Source: support.google.comGemini data retentionChecked on 19 October 2026

For Gemini in Workspace: SOC 1/2/3 and ISO 9001, 27001, 27701, 27017, 27018 and 42001 (9 named), plus FedRAMP High. Gemini Notebook and Gemini in Chrome are not covered.

Vendor's wording: “Gemini has attained SOC 1/2/3, ISO 9001, ISO/IEC 27001, 27701, 27017, 27018, and 42001 certifications.”

Source: support.google.comDoes using Gemini impact any existing compliance certificationsChecked on 19 October 2026

Yes. Admins can switch the Gemini app off for users, and for supported editions can enable or disable Gemini features and the side panel in Workspace services.

Vendor's wording: “Admins manage access to the Gemini app and can choose to disable the service.”

Source: support.google.comAs an admin, can I turn Gemini on and off for users?Checked on 19 October 2026

€13.60 / user / mo.

EUR 13.60 per user/month excluding tax for the Standard (Business Standard) card, all prices in EUR, billed monthly. The page also shows a 16% saving with a one-year commitment and an introductory discount for new customers; which rate EUR 13.60 is was not stated.

Vendor's wording: “Price is per user/month and does not include tax”

Source: workspace.google.comStandard plan cardChecked on 19 October 2026