Understanding Google Gemini Compliance, Certifications & Responsibility

Editor's Note: Google announced on February 8, 2024 that Duet AI and Bard will be moved under the Gemini product umbrella. This blog has been updated to reflect the new branding. 

Gemini for Google Workspace and Gemini for Google Cloud (formerly Duet AI) are two powerful new tools designed to help you with various tasks, from drafting emails to coding assistance. These fully managed systems are natively integrated into both Google Cloud and Google Workspace.

Gemini helps with tasks like:

• Data Analysis: Gemini for Google Cloud and for Google Workspace can both help you analyze and visualize your data in Google Sheets, BigQuery, Looker, and other tools, making it easier to identify trends and patterns.
• Code Development: Helps you write and debug code in multiple programming languages. It can also generate code blocks based on your comments.
• Text-to-Image Visualization: Plug a short prompt into Gemini for Google Workspace and it’ll generate stunning graphics and photos for you to use in your emails, presentations, and documents.
• Video Enhancements: Gemini for Google Workspace automatically improves audio quality issues such as poor microphones, noisy environments, or poor network connectivity. It also enhances image quality in low light, low quality webcams, and in some poor network scenarios, so you always look and sound your best. 
• Smart Writing Suggestions: Gemini actively assists users by offering contextually relevant suggestions as they work within Google Workspace apps like Gmail, Docs, and Drive. You can also use Gemini for Google Workspace to easily add smart chips for information like location, status, and custom variables. 

As with any new technology, it's important to understand the compliance, certifications, and responsibility considerations associated with using Gemini.

Certifications and Compliance for Gemini

Gemini is compliant with many industry standards and regulations, including:

• ISO/IEC 27001 (Information Security Management)
• ISO/IEC 27017 (Cloud Security)
• ISO/IEC 27018 (Protection of Personally Identifiable Information (PII))
• ISO/IEC 27701 (Privacy Information Management)
• SOC1
• SOC2
• SOC3
• VPC Service Controls

Gemini is also compliant with several specific regulations, such as:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Health Insurance Portability and Accountability Act (HIPAA)
• Payment Card Industry Data Security Standard (PCI DSS)

Because Gemini is integrated into both Google Cloud and Google Workspace, it follows the same practices to ensure user safety. Learn more about Google Cloud compliance here. You can also learn more about Google Gemini-supported products and types here.

Gemini Security Standards

In addition to its certifications and compliance standards, Gemini is designed with security standards to help protect your data. It's built on the same infrastructure as Google Workspace, one of the world's most secure cloud platforms.

Gemini also uses a multitude of security features, including:

• Data Encryption: All data that Geminiprocesses are encrypted at rest and in transit.
• Data Loss Prevention (DLP): DLP policies can prevent sensitive data from being leaked or accessed by unauthorized users.
• Audit Logging: All user activity and changes to data are logged and can be reviewed.
• Role-based Access Control (RBAC): RBAC can be used to restrict who can access and use Gemini.

Google is committed to ensuring that Gemini is used safely and responsibly, which is why the company also follows strict guidelines in developing this product:

• Transparency: Google is transparent about how Gemini works and how it is used.
• Accountability: Google is accountable for the use of Gemini and its impacts on society.
• Fairness: Gemini should be used fairly and unbiasedly.
• Inclusiveness: Should be accessible to everyone, regardless of background or abilities.
• Safety: It is important to use Gemini safely and responsibly.

Google's Responsible AI Principles

Google has other AI products, like Bard and Vertex AI, and because of their position in the industry, they've developed AI principles. These principles demonstrate their commitment to creating responsible technology and establishing specific application areas they will not pursue.

Google's AI principles for Gemini and other artificial intelligence products are:

• Be Socially Beneficial: In countries where it operates, Google makes efforts to develop AI technologies that adhere to cultural, social, and legal norms.
• Avoid Creating or Reinforcing Unfair Bias: Google recognizes that AI algorithms sometimes reflect unfair biases. Their technology seeks to avoid unfair impacts on people, specifically those targeted for sensitive characteristics.
• Be Built and Tested for Safety: To evade potential safety or security risks, Google will persist in developing and implementing robust safety practices in its AI technology.
• Be Accountable to People: Google aims to design AI technology that provides ample opportunities for feedback, explanations, and appeal. Their AI systems are always subject to human direction and control.
• Incorporate Privacy Design Principles: In the development of its AI technology, Google integrates privacy principles and offers the chance for notice and consent, along with providing transparency and control over data usage.
• Uphold High Standards of Scientific Excellence: Google's development teams are committed to high standards of scientific excellence as they work to grow and expand AI technology.
• Be Made Available for Uses that Accord with These Principles: To help limit potentially harmful technology, Google will thoroughly evaluate the uses of potential AI products to decide what is worth investing in. They will evaluate products based on factors like primary purpose and use, nature and uniqueness, scale, and nature of Google's involvement.

With the tools' many compliances, certifications, and Google's active commitment to taking responsibility for its technology, users can trust that Gemini for Google Cloud and Google Workspace are designed for top protection and respect for user data.

Get Google Assistance from Promevo

If you want to learn more about integrating Gemini into your Workspace subscription or you're just starting in your Google journey, look to Promevo.

As a certified Google partner, Promevo provides end-to-end support with all things Google, from setting up Workspace to helping you integrate tools like Gemini for the betterment of your organization. Our team helps you harness the robust capabilities of Google to reinvent the way you do business and accelerate the growth of your company.

We are proud to be a 100% Google-focused partner helping you succeed wherever you are in your Google journey. Contact us today to get started.

FAQs: Gemini Compliance, Certifications & Responsibility

Does Google Gemini have ISO certification?

Yes, Google Gemini is ISO/IEC 27001, 27017, 27018, and 27701 certified.

Can you use Google Gemini in Gmail?

Yes, you can use Gemini in Gmail to draft emails, proofread content, format emails, and more. To use Gemini in Gmail, simply click the Gemini icon in the top right corner of your Gmail window. You can then type in a prompt or question, and Gemini will respond with suggestions or assistance.

Who can use Gemini?

Gemini for Google Workspace is currently available to users with an eligible Google Workspace plan. This includes the following plans:

• Google Workspace Business Plus
• Google Workspace Enterprise
• Google Workspace Education Plus
• Google Workspace for Government
• Google Workspace for Nonprofits

Learn more about Gemini for Workspace and get started here.

Gemini for Google Cloud, on the other hand, is currently only available in preview. Stay tuned for more information coming later this year.