Google Gemini compliance: GDPR, AI Act, DPA, training, transfers

TL;DR. Google offers Gemini on three surfaces, and their terms differ.

• Gemini Enterprise / Vertex AI: contractually no training, with data residency and a route to zero data retention.
• Gemini API via AI Studio at ai.google.dev: a billed key is covered by Google's processor DPA and is not used for training. The free tier is used to improve Google's products, except for users in the EEA, Switzerland and the UK, to whom the paid-tier data terms apply. There is no residency option.
• Gemini app and Gemini in Workspace (formerly Gemini for Google Workspace) at gemini.google.com and inside Gmail, Docs and the other Workspace apps: the terms follow the account. On a personal Google account, chats are used to improve Google's services, including training its generative AI models, while the Keep Activity setting is on. On a qualifying Workspace edition, the Cloud Data Processing Addendum applies and the content is not used for model training without the customer's permission.

On Vertex AI, data at rest stays in the location you select. ML processing stays in Europe only when you call the EU multi-region or a European regional endpoint, because the global endpoint gives no residency guarantee. Vertex AI is within the scope of Google Cloud's ISO/IEC 42001, ISO/IEC 27001 and SOC 2 certifications. Those certifications do not name the Gemini Developer API.

DPO action: lock down which Gemini surface your staff actually use; for EU personal data on Vertex AI, call the EU multi-region or a European regional endpoint and never the global endpoint; make sure staff use Gemini through their Workspace accounts, where the no-training commitment applies, and not through personal Google accounts; put a BAA in place before any PHI (Vertex AI, or Workspace once an administrator has accepted the BAA; never consumer Gemini or AI Studio).

What the tool does

Google ships Gemini in three places that buyers commonly conflate:

1. Gemini Enterprise / Vertex AI (rebranded "Gemini Enterprise Agent Platform" at Google Cloud Next 2026) - the enterprise platform for building, deploying, and governing AI agents grounded in your own data. Runs inside Google Cloud, billed via GCP, governed by Google's Cloud DPA.
2. Gemini API via AI Studio at ai.google.dev - the developer API, with a free tier and a paid tier. Paid use, meaning use through a Cloud project linked to an active billing account, is governed by Google's processor Data Processing Addendum, which is a different agreement from the Vertex AI terms.
3. Gemini app and Gemini in Workspace - the standalone chat at gemini.google.com and the Gemini features inside Google Workspace (Gmail, Docs, Slides, Sheets, Meet). The data terms depend on the account: a personal Google account falls under Google's consumer terms, while a qualifying Workspace edition brings the Cloud Data Processing Addendum and Google's contractual no-training commitment. For most enterprise buyers using Workspace, this is the most-touched surface.

Compliance defaults differ across all three. Most enterprise procurement should be looking at Gemini Enterprise / Vertex AI; AI Studio is fine for prototyping but is not the enterprise contracting surface.

Data processed

• Text and multimodal input (image, audio, video, PDF - Gemini is natively multimodal)
• Document content via Vertex AI grounding / RAG
• Prompts, function-call payloads, tool-use intermediates
• Embeddings (Vertex AI offers first-party embeddings)
• Optional grounding with Google Search. On Vertex AI, queries and contextual information are stored for up to three days, and Google states that "There is no way to disable the storage of this information". Grounding is also excluded from Google's data residency commitments.
• For Workspace Gemini: any content the signed-in user has access to in Gmail, Drive, Calendar, etc.

Special-category likelihood: High in any free-form deployment. Gemini's multimodal nature means staff may upload images / scanned documents that contain Article 9 categories (medical scans, ID photos, etc.) without realising. UI controls and DPIA matter more than usual.

Default geographic processing: on Vertex AI, data at rest remains in the location the customer selects, whichever endpoint is called. ML processing depends on the endpoint: "Requests submitted to a global endpoint may be processed in any Google Cloud location around the world, and therefore don't provide any data residency guarantees." The EU multi-region endpoint keeps processing within EU member states for the models Google lists. On the Gemini Developer API, Google states that data "may be stored transiently or cached in any country in which Google or its agents maintain facilities".

DPA availability

Google Cloud Data Processing Addendum (Cloud DPA) governs Vertex AI and Gemini Enterprise. It is incorporated into Google Cloud commercial agreements and publicly available without a sales call. The version checked on 4 October 2026 was last modified on 8 June 2026.

• URL: https://cloud.google.com/terms/data-processing-addendum
• Includes SCCs and the UK International Data Transfer Addendum (UK Addendum)
• Updated regularly; check version date on each review

For the paid Gemini Developer API, the Gemini API Additional Terms provide that Google "will process your prompts and responses in accordance with the Data Processing Addendum for Products Where Google is a Data Processor". That addendum, Version 10 of 7 May 2026, lists "Gemini API Paid Services" among the services it covers and includes the Data Privacy Framework, SCCs, UK terms and Swiss terms. The Developer API lacks Vertex AI's data residency and zero data retention routes, and Google itself advises: "If your workload requires guaranteed zero data retention or enterprise data processing agreements, use Vertex AI."

For Gemini in Workspace and the Gemini app used with a qualifying Workspace edition, the Cloud Data Processing Addendum applies. Google states that "User prompts are considered customer data under the Cloud Data Processing Addendum", and the former Google Workspace DPA address now redirects to the Cloud Data Processing Addendum. Verify that your Workspace edition includes the Gemini features you use.

Subprocessor list

Google Cloud publishes a subprocessor list applicable to all Google Cloud services including Vertex AI / Gemini Enterprise.

• URL: https://cloud.google.com/terms/subprocessors (last modified 20 August 2026)
• The list includes third parties, such as Accenture and Cognizant, for technical support on the Agent Platform and generative AI services
• Under the Cloud DPA, Google notifies a new subprocessor at least 30 days before it starts processing customer data, and a customer may object within 90 days by terminating the agreement for convenience. Notices go to the email addresses designated in the Admin Console, an Order Form or Essential Contacts, and Google states that "you don't need to subscribe"

For the paid Gemini Developer API, the processor DPA points to business.safety.google/subprocessors/, which on 4 October 2026 carried no Gemini API entry. The DPA gives the same 30-day notice and 90-day termination right.

Training-on-customer-data position

Vertex AI / Gemini Enterprise: Customer data is not used to train Google's AI/ML models without prior permission or instruction. Section 18 of Google's Service Specific Terms ("Training Restriction", formerly Section 17) makes this an explicit contractual commitment: "Google will not use Customer Data to train or fine-tune any AI/ML models without Customer's prior permission or instruction."

Vertex AI Zero Data Retention (ZDR): Google describes zero data retention as a set of conditions to meet, not a single setting. Where a customer is in scope for abuse-monitoring prompt logging, flagged prompts are kept "for up to 90 days in the same region or multi-region selected by the customer" unless the customer requests an exception. Google adds that "customers with a Google Cloud Master Agreement are exempt from prompt logging for this abuse monitoring by default."

Several features also store data. Grounding with Google Search stores it for up to three days and cannot be switched off. Grounding with Google Maps stores it for 30 days. The Interactions API stores state unless store is set to false, and session resumption and request-response logging have to stay disabled. Claude Mythos and Fable models on the platform carry a 30-day log.

Gemini API paid tier retention: "Google retains the following data for fifty-five (55) days for the purposes of detecting and preventing violations of the Prohibited Use Policy", and Google offers no zero data retention route on the Developer API.

Gemini API free tier (AI Studio / unbilled keys): Inputs and outputs are used to improve Google's models. This is the current published policy (confirmed June 2026), not a historical artefact. The dividing line is billing, not surface: the moment a Gemini API key is linked to a paid billing account, prompts and responses are no longer used for training, the same position as Vertex AI. Users in the EEA, Switzerland and the UK are treated differently. For them, the paid-tier data terms apply to all services, including AI Studio and unpaid quota. Google's terms also state: "You may use only Paid Services when making API Clients available to users in the European Economic Area, Switzerland, or the United Kingdom." Outside those territories the free tier is the unmanaged-risk surface, and the fix is often as small as enabling billing on the key staff already use.

Consumer Gemini (gemini.google.com on a personal Google account): while the Keep Activity setting is on, Google uses chats to improve its services, including training generative AI models, and human reviewers read a subset of chats. Google's consumer privacy hub states: "To stop your future chats from being reviewed to improve Google services, turn off your Keep Activity setting." With Keep Activity off, future chats are kept for 72 hours and are not used to train Google's models unless the user sends feedback.

Gemini in Workspace and the Gemini app on a qualifying Workspace edition: the content is not used for model training without the customer's permission. Google's Workspace privacy hub states: "Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission." The contractual commitment is section 12.11 (Training Restriction) of the Google Workspace Service Specific Terms. The admin setting "Control Workspace Intelligence for generative AI features" decides which Workspace services (Gmail, Drive, Calendar or Chat) Gemini searches for context.

The enterprise no-training story for Vertex AI is solid and contractual. The free-tier API and consumer-chat defaults are not. The biggest unmanaged risk is staff using gemini.google.com on personal Google accounts, sometimes signed in as their work identity if Workspace is configured permissively. - My read

EU / UK transfer position

The Google Cloud DPA uses an "Alternative Transfer Solution" where Google has adopted one, and the Standard Contractual Clauses (SCCs) where it has not. Google states: "As of September 1, 2023, Google has adopted an Alternative Transfer Solution for transfers of EU/EEA personal data to, and onwards from, the U.S." That solution is the EU-US Data Privacy Framework. Google adopted the UK Extension and the Swiss-US framework on the same basis from 16 September 2024. The SCCs remain in the DPA as the fallback. Google's controller-to-processor SCCs carry the ICO's International Data Transfer Addendum for UK data, while its processor-to-processor SCCs, with Google as exporter, carry Swiss terms only. Google also reserves the right to rely on Article 49(1) GDPR for transfers to countries other than the US. The processor DPA for the paid Gemini API follows the same structure.

EU-US Data Privacy Framework (DPF) certification: Google LLC and its US subsidiaries hold all three certifications, EU-US, Swiss-US and the UK Extension. When the participant registry was checked on 4 October 2026 and again on 15 October 2026, each time with a control query in the same run, each showed the status "Active", with the current period running to 13 September 2027. On 14 September 2026 the same entries read "Active - Re-certification under Review", the register's wording for an annual re-certification in progress, so the review closed within three weeks. Google stayed on the active list throughout. It has held the EU-US entry since 22 September 2016. The framework survived its first court test when the EU General Court dismissed the challenge to it on 3 September 2025, however an appeal is pending at the Court of Justice of the EU (filed October 2025). So DPF is a valid transfer basis today with a live appeal in the background, which is why the SCCs in the Cloud DPA matter as the fallback. Google is the only one of the three largest model vendors on the participant list. Neither OpenAI nor Anthropic appears on it.

EU data residency: Google's data residency terms allow a customer to configure covered services to store data at rest and perform ML processing in a specific multi-region, and Google then performs both only there. For generative AI this applies only to the models listed in Google's ML-processing documentation and excludes Grounding with Google Search, Web Grounding for Enterprise, Grounding with Google Maps and RAG Engine. The EU multi-region endpoint keeps processing within EU member states, and Google states that geographies outside the EU, "including the United Kingdom and Switzerland, are excluded from this endpoint." In the United Kingdom region (europe-west2), in-country ML processing was available on 4 October 2026 for only Gemini 3.5 Flash, Gemini 2.5 Flash 128k and two text-embedding models. A DPIA should therefore record the endpoint each integration calls and the models it uses, and UK buyers should check whether the model they need is processed in the UK.

Google's "Sovereign Cloud" partnerships (with T-Systems in Germany, others) offer additional EU data sovereignty options for highly regulated buyers. Out of scope for most SMEs, but relevant if your sector requires it.

Security documentation

Google Cloud's compliance pages, checked on 4 October 2026, state:

• ISO/IEC 42001:2023: "Google Cloud, Google Workspace, and Gemini (App) are certified as ISO/IEC 42001:2023 compliant", with "Gemini Enterprise Agent Platform (formerly Vertex AI Platform)" among the products in scope
• ISO/IEC 27001: "The Google Cloud Services ISMS has received an accredited ISO/IEC 27001 certification", with generative AI on the Agent Platform in scope
• SOC 2: generative AI on the Agent Platform is in scope
• The Cloud DPA also commits Google to SOC 3 reports, ISO 27017, ISO 27018 and a PCI DSS attestation for the services it covers
• HIPAA BAA: available for qualifying customers

These scope statements name the Agent Platform and do not name the Gemini Developer API, whose processor DPA states that "Google will maintain the ISO 27001 Certification or other appropriate measures to demonstrate the effectiveness of the Security Measures." A buyer using the Developer API should not rely on the Vertex AI certifications. Google's wider certifications, including FedRAMP High, C5, IRAP and MTCS, were last checked for this profile in June 2026.

HIPAA & BAA position

Gemini is not HIPAA-eligible by default on any plan. Which surface you use decides everything, the same split that drives the rest of this profile. Google will sign a BAA, covering two surfaces once it is in place:

• Vertex AI (Gemini on Google Cloud). Vertex AI is on Google Cloud's HIPAA-eligible services list, and the BAA comes through the Google Cloud DPA path. This is the route for most enterprise PHI workloads.
• Gemini in Workspace, once a Workspace super administrator accepts Google's BAA in the Admin console, which is possible on any Workspace edition except the legacy free edition. Google lists Gemini in Google Workspace, the Gemini app (excluding Gemini in Google Chrome) and the Gemini Mac app among the covered Workspace services; Gemini Notebook is not covered.
• Not eligible: consumer Gemini at gemini.google.com and the AI Studio free tier (which also trains on inputs). Staff touching either with PHI creates a breach no later contract can cure.

This is the HIPAA version of the vendor's core trap: "we use Gemini" is not an inventory entry. Pin the surface in writing (Vertex AI, or Workspace with the BAA accepted by an administrator) before any PHI moves. The BAA is the contractual piece; HIPAA's Security Rule (risk analysis, minimum-necessary, workforce training, audit controls, breach notification) still falls on the covered entity. See HIPAA for AI tools for the full walkthrough across vendors.

AI Act role + risk classification

• Role: Google is a provider of general-purpose AI models (the Gemini family). GPAI provider obligations (Articles 51-55) have applied since 2 August 2025.
• Your role as a buyer: deployer when your staff use Gemini in Workspace or the Gemini app under your authority, with deployer obligations. If you build your own AI system on Vertex AI or the Gemini API and place it on the market or put it into service under your own name, you are the provider of that system (Article 3(3)) and a downstream provider of a system that integrates Google's model (Article 3(68)).
• The dates that matter now: Article 50 transparency obligations (telling users they are interacting with AI, and marking AI-generated content) apply from 2 August 2026; generative-AI systems already on the market by then have until 2 December 2026 to meet the machine-readable marking requirement of Article 50(2). High-risk obligations for stand-alone Annex III systems have been deferred to 2 December 2027 by the Digital Omnibus, which entered into force on 27 July 2026.
• Risk tier: depends on the use case. An Annex III use case (recruitment, credit, education, law enforcement, migration, justice) carries the deployer obligations in Article 26 from 2 December 2027, whichever model is used, unless the Article 6(3) exception applies (a system that profiles natural persons is always high-risk). A buyer that puts Gemini, which is not classified as high-risk, to an Annex III use should assess whether it has become the provider of a high-risk system under Article 25(1)(c). Before deploying an Annex III high-risk system (other than for critical infrastructure under point 2), deployers that are bodies governed by public law or private entities providing public services, and deployers of creditworthiness or life and health insurance pricing systems under points 5(b) and (c), must also carry out a fundamental rights impact assessment (Article 27). Vertex AI's enterprise governance features (Model Garden filtering, safety filters, Vertex AI Model Monitoring) help evidence deployer due diligence; keep audit trails.

DPIA prompts (for your use case)

1. Which Gemini surface are you actually deploying - Vertex AI, AI Studio, consumer chat, or Workspace Gemini? They have different DPAs, different training defaults, and different data residency stories. Get this on paper before anything else.
2. Which endpoint does each integration call? For EU personal data on Vertex AI, use the EU multi-region or a European regional endpoint and a model listed for ML processing there, and avoid the global endpoint and grounding features. For UK data, check whether the model is processed in the UK region.
3. Have you met the zero data retention conditions on Vertex AI if your data sensitivity warrants it, including an abuse-monitoring exception where you are in scope for prompt logging?
4. Have you mapped staff use of gemini.google.com and Workspace Gemini features? Personal Google accounts using consumer Gemini fall under consumer terms; this is the most-missed risk in Workspace-using SMEs. For Workspace tenants, confirm that staff sign in to Gemini with their Workspace accounts, and use the "Control Workspace Intelligence for generative AI features" admin setting to decide which Workspace services Gemini may search.
5. AI Act Annex III applicability: if your use case touches recruitment, credit, education, law enforcement, migration, or justice, the high-risk deployer obligations apply from 2 December 2027 unless the Article 6(3) exception applies, and you should assess whether the use has made you the provider under Article 25(1)(c).
6. Multimodal input: are users uploading images/PDFs that may contain Article 9 special-category data? UI controls plus a DPIA covering this scenario.

Unresolved questions / red flags

• Three distinct surfaces with different defaults confuse procurement. Most "Gemini compliance" assertions in SME marketing material conflate them.
• EU residency depends on the endpoint and the model. The global endpoint gives no residency guarantee, grounding features are excluded, and the EU endpoint does not cover the UK or Switzerland.
• Free-tier AI Studio defaults shift periodically. Don't assume yesterday's read still holds - re-check on each profile refresh.
• Personal accounts fall outside the Workspace commitments. Gemini used with a qualifying Workspace edition is not used for model training without permission, but the same person signed in with a personal Google account is under consumer terms. The "Control Workspace Intelligence for generative AI features" admin setting governs which Workspace data Gemini searches, and training is governed by the contract.
• The endpoint is set in code. An integration that calls the global endpoint, or a model not listed for ML processing in the chosen region, loses the residency commitment without any change to the project settings.
• "Gemini Enterprise Agent Platform" rebrand from Vertex AI (Cloud Next 2026) folded Vertex AI, Agentspace, and the Gemini Code Assist enterprise tier into one console and billing surface, priced per agent. Existing Vertex AI workloads, SDKs, and APIs run unchanged. Google's terms now use the new product names, and the Service Specific Terms have been renumbered, with the Training Restriction moving from Section 17 to Section 18. Older Vertex AI documentation URLs redirect to docs.cloud.google.com/gemini-enterprise-agent-platform/, so verify links against the canonical product page (cloud.google.com/products/gemini-enterprise-agent-platform).

Related profiles

• OpenAI - same general-purpose LLM category, US-centric defaults
• Anthropic - same category, multi-cloud subprocessing

Sources checked

• Google Cloud Service Specific Terms, Section 18 ("Training Restriction", formerly Section 17), last modified 12 October 2026: https://cloud.google.com/terms/service-terms - checked 2026-10-15
• Generative AI in Google Workspace Privacy Hub (training, retention, Gemini Notebook, BAA exclusions; last updated 6 October 2026): https://support.google.com/a/answer/15706919?hl=en - checked 2026-10-15
• Google Workspace Service Specific Terms (section 12.11 Training Restriction, section 12.7 Healthcare Restrictions; last modified 12 October 2026): https://workspace.google.com/intl/en/terms/service-terms/ - checked 2026-10-15
• Former Google Workspace DPA address, which redirects to the Cloud Data Processing Addendum: https://workspace.google.com/terms/dpa_terms.html - checked 2026-10-15
• Workspace HIPAA BAA acceptance (administrator acceptance; legacy free edition excluded): https://knowledge.workspace.google.com/admin/compliance/privacy-compliance-and-records-for-google-workspace-and-cloud-identity, and the Google Cloud HIPAA page listing the covered Workspace and Cloud services: https://cloud.google.com/security/compliance/hipaa - checked 2026-10-15
• Gemini Apps Privacy Hub (consumer Keep Activity setting and training use): https://support.google.com/gemini/answer/13594961?hl=en - checked 2026-10-15
• Gemini API Additional Terms (effective 23 March 2026): https://ai.google.dev/gemini-api/terms, and the processor Data Processing Addendum, Version 10 of 7 May 2026: https://business.safety.google/processorterms/ - checked 2026-10-04
• Gemini API abuse monitoring and zero data retention pages: https://ai.google.dev/gemini-api/docs/usage-policies and https://ai.google.dev/gemini-api/docs/zdr - checked 2026-10-04
• Vertex AI zero data retention, abuse monitoring, data residency and locations documentation, now at https://docs.cloud.google.com/gemini-enterprise-agent-platform/ - checked 2026-10-04
• Google Cloud DPA (last modified 8 June 2026): https://cloud.google.com/terms/data-processing-addendum; Alternative Transfer Solution page (last modified 29 September 2026): https://cloud.google.com/terms/alternative-transfer-solution; data residency terms: https://cloud.google.com/terms/data-residency - checked 2026-10-04
• Google Cloud subprocessor list (last modified 20 August 2026): https://cloud.google.com/terms/subprocessors - checked 2026-10-04
• Google Cloud ISO/IEC 42001, ISO/IEC 27001 and SOC 2 scope pages under https://cloud.google.com/security/compliance/ - checked 2026-10-04
• EU-US Data Privacy Framework - Google LLC (id 5780) shown as "Active" on the EU-US, Swiss-US and UK Extension certifications, periods to 13 Sep 2027, with a same-run control query (dataprivacyframework.gov participant registry) - checked 2026-10-04 and 2026-10-15. EU General Court dismissal 3 Sep 2025, CJEU appeal pending - last checked 2026-09-14
• Regulation (EU) 2024/1689 (the AI Act), Articles 3, 6, 25, 26 and 50 and Annex III, and Regulation (EU) 2026/1744 (the Digital Omnibus on AI), amending Article 25(2) and (4), inserting Article 111(4) (2 December 2026 for Article 50(2) on systems already on the market) and setting 2 December 2027 for Annex III high-risk systems in Article 113, both from the Publications Office (https://publications.europa.eu/resource/celex/32024R1689 and https://publications.europa.eu/resource/celex/32026R1744) - checked 2026-10-15
• Gemini Enterprise Agent Platform (Cloud Next 2026): https://cloud.google.com/products/gemini-enterprise-agent-platform - checked 2026-06-23

Related reading

• DPA for AI vendors - the eight clauses to check on any AI vendor DPA, applied to Workspace Gemini
• EU AI Act for AI buyers - deployer-side obligations for buyers running Workspace Gemini or Vertex AI
• HIPAA for AI tools - BAA scope across Google Cloud and Workspace
• Copilot 365 vs Google Workspace AI compliance - the closest enterprise-tier alternative
• Gemini vs Vertex AI compliance - picking between the Workspace surface and the Google Cloud developer surface
• Practitioner how-to (Janus Compliance): Is the Gemini API GDPR compliant? - configuring the GDPR-compliant path step by step (DPA, EU residency, DPIA, transfers)
• Templates (Janus Compliance, which publishes CompanyScope; £49): AI API GDPR Compliance Pack - editable Word templates for the provider contract review, DPIA, transfer assessment, privacy notice wording and records of processing, covering OpenAI, Anthropic and Google, with provider positions as published on 4 October 2026

For ongoing AI compliance support, work with Janus DPO-as-a-Service. For other vendors, browse the full index, or see real agent failures analysed legally in the AI Agent Incident Register.