Gemini
Google · Generative AI assistant
Ayliea's assessment: Medium RiskAyliea recommends: ApproveIn Ayliea's curated list
Verified . Risk classification and recommended policy are Ayliea's subjective assessments — not vendor certifications.
- Data residency
- Global (US default); EU residency on Workspace Enterprise
- Zero retention available
- Yes (commercial / Enterprise tier)
- Certifications
- SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, HIPAA
Why this rating
Workspace Enterprise integration provides a strong DPA, data residency controls, and broad certifications. Consumer Gemini lacks these protections.
Considerations before deploying
- Block consumer gemini.google.com if Workspace Enterprise tier is in use
- Disable Gemini training opt-ins in Workspace admin console
Sources
- Google Cloud Compliance (cloud.google.com)
- Workspace Privacy (workspace.google.com)
Want this for every tool on your network?
Ayliea finds every AI tool your team is actually using and applies your policies automatically.