How does Cloud HSM for Google Workspace work?

Organizations in highly-regulated sectors, such as government, defense, financial services, and healthcare, are required to meet stringent standards to safeguard sensitive data. Client-side encryption (CSE) for Google Workspace is a unique, privacy-preserving offering that keeps customer data confidential and enables the customer to be the sole arbiter of their data, helping them adhere to rigorous compliance regimes.

Google Workspace CSE adds another layer of encryption to your organization's data — like files, emails, meetings, and events — in addition to the default encryption that Google Workspace provides. CSE can be especially beneficial for organizations that store sensitive and regulated data because it can provide:

• Confidentiality for organizations working with sensitive intellectual property, healthcare records, and financial data.

• Compliance support for organizations in highly-regulated industries that have ITAR and EAR requirements.

• Data sovereignty for organizations that need demonstrative data control using encryption keys that can be held at a defined boundary, such ...