summarize material changes or issues identified within the internal control environment beyond the period end date of the most recent SOC report. Bridge letters are available for SOC 1 and SOC 2 reports.Google Cloud creates monthly bridge letters with each letter designed to cover the period since the most recent SOC report. For example, Google Cloud issues a bridge letter in early January to cover the look-back period of November 1 to Dece
View source ↗Google Cloud SOC 2 status and provider evidence
Review Google Cloud’s public SOC 2 statement, report type, evidence source, and freshness.
Google Cloud’s SOC 2 stack
No provider is named on the current source.
We will update this page if the company publishes more detail.
Frameworks named by Google Cloud
ation’s controls relevant to the Trust Services Criteria of security, availability, processing integrity, confidentiality, or privacy.Looking for Google Cloud and Google Workspace SOC 2 reports? Customers can request the reports at their convenience via Compliance Reports Manager.ReferenceAICPASOC 2SSAE 16ISAE 3402SOC Toolkit for Service OrganizationsGoogle Cloud and SOC 2 complianceAccessing Google Cloud’s SOC 2 reportsGoogle Cloud regularl
View source ↗Primary compliance evidence
ation’s controls relevant to the Trust Services Criteria of security, availability, processing integrity, confidentiality, or privacy.Looking for Google Cloud and Google Workspace SOC 2 reports? Customers can request the reports at their convenience via Compliance Reports Manager.ReferenceAICPASOC 2SSAE 16ISAE 3402SOC Toolkit for Service OrganizationsGoogle Cloud and SOC 2 complianceAccessing Google Cloud’s SOC 2 reportsGoogle Cloud regularl
Open source ↗