Gemini for Google Workspace

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

AVD-2026-0009

Kind

Business tier

Jurisdiction

United States

Last verified

15 September 2026

Added

15 September 2026

• Google states Workspace does not use customer data for training models without the customer's prior permission or instruction.
• Content is not human reviewed or otherwise used for generative AI model training outside the customer's domain without permission.
• Retention for Gemini in Workspace runs from 90 days to indefinite as determined by admins, and the Gemini app for Workspace users up to 36 months.
• Existing Workspace protections, including data regions policies, apply automatically to these features.

Used for training by default, Retention period, Deletion on request, Storage region and residency, Subprocessor list published, Human review of content, Opt out available, DPA available, Persistent memory across sessions, Last change to the terms. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Used for training by defaultStated

No without permission. The privacy hub says Workspace does not use customer data for training models without the customer's prior permission or instruction.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Retention periodStated

Admin controlled and surface dependent. Gemini in Workspace runs 90 days to indefinite, the Gemini app up to 36 months, and Gemini Notebook keeps nothing after the session.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Deletion on requestSilent

Deletion is handled through the admin set retention controls. No separate deletion promise is printed on the privacy hub.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Storage region and residencyStated

Existing Workspace protections, which include data regions policies, are applied automatically to these features.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Subprocessor list publishedStated

The privacy hub names none. The published register is the Google Cloud Platform subprocessors page, which prints a modification date of 20 August 2026.Google Cloud Platform subprocessors, primary source, 20 August 2026.

Human review of contentStated

Chats and uploaded files are not reviewed by human reviewers or used to train generative AI models outside the domain without permission.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Opt out availableStated

Framed as permission rather than an opt out. Nothing is used for training without the customer's prior permission or instruction.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

DPA availableStated

The Cloud Data Processing Addendum is named as the governing instrument for these features.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Persistent memory across sessionsSilent

Persistent memory is not addressed as a named feature on the privacy hub.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

Last change to the termsStated

The generative AI in Google Workspace privacy hub prints 14 August 2026, and the Cloud subprocessors register prints Last modified 20 August 2026.Google Workspace, generative AI privacy hub, primary source, 14 August 2026.

1. 90 days

   Floor of the admin controlled retention range for Gemini in Workspace

   Google Workspace, generative AI privacy hub, primary source, as of 14 August 2026.

2. 36 months

   Ceiling of admin controlled retention for the Gemini app under Workspace

   Google Workspace, generative AI privacy hub, primary source, as of 14 August 2026.

The load bearing phrase is outside your domain. Google's commitment is that content is not reviewed or trained on beyond the organisation without permission, which is a different promise from nothing is processed. Retention is your admin's decision, not Google's, so the honest line in a workplace policy is the number your own administrator set, not the vendor's range. Write that number down and review it when the admin changes.

1. Google Workspace, generative AI privacy hubPrimary · 14 August 2026
2. Google Cloud Platform subprocessorsPrimary · 20 August 2026
3. Google, how Gemini in Workspace protects your dataPrimary · 15 September 2026

• VerifiedConsumer tierAVD-2026-0008

  The Gemini app on a personal Google account

  United States · verified 15 September 2026

  Google states that a subset of chats is reviewed by human reviewers, including trained reviewers from its service providers.

• VerifiedAPI and platformAVD-2026-0011

  The paid Gemini API and Vertex AI

  United States · verified 15 September 2026

  On paid services Google states it does not use prompts, system instructions, cached content or files, or responses to improve its products.

• VerifiedBusiness tierAVD-2026-0013

  Microsoft 365 Copilot, now named Microsoft Copilot

  United States · verified 15 September 2026

  Prompts, responses and data accessed through Microsoft Graph are not used to train foundation large language models.

• VerifiedAPI and platformAVD-2026-0026

  Amazon Bedrock

  United States · verified 15 September 2026

  Amazon Bedrock uses a zero data retention security model, so by default it does not store model inputs or outputs.

• VerifiedBusiness tierAVD-2026-0025

  GitHub Copilot Business and Enterprise

  United States · verified 15 September 2026

  GitHub states it does not use Copilot Business or Copilot Enterprise customer data to train AI models.

• VerifiedBusiness tierAVD-2026-0024

  Cursor and its privacy mode

  United States · verified 15 September 2026

  The terms of service state that Cursor will not use content to train any AI models unless you have explicitly agreed.