Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.
AI Terms Tracker
Get weekly changes

Does Gemini for Google Workspace train on your data? (Business plans)

Business plan Google · Assistant · Last verified

Doesn't train by default

Doesn't train on business data by default.

Short answer: No

"Workspace does not use customer data for training models" outside your domain without permission.

Source: support.google.com/a/answer/15706919

Why this matters: A "no" keeps your prompts and files out of Google's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →

5/7 assurances found·8 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Gemini for Google Workspace, each linked to Google's own page.

Personal plan Using the free or personal version? Gemini app (personal Google account) has different terms: Trains by default · Compare personal vs business
Summary of Google's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with Google before relying on it.

Trains on your data by default

No

"Workspace does not use customer data for training models" outside your domain without permission.

Source:

Data retention

90 days to indefinite (admin-set)

Gemini in Workspace prompts/responses: 90 days to indefinite as set by admins; Gemini Notebook prompts not retained after session.

Source:

SOC 2 Type II

Type not stated

Lists SOC 1/2/3 attestations; Type II not explicitly stated on page.

Source:

ISO/IEC 27001

Yes

ISO/IEC 27001 (plus 27701, 27017, 27018).

Source:

ISO/IEC 42001

Yes

ISO/IEC 42001 listed.

Source:

DPA available

Yes

Prompts are customer data under the Cloud Data Processing Addendum.

Source:

BAA / HIPAA

Yes

Gemini can support HIPAA workloads (HIPAA Included Functionality).

Source:

Data residency options

Yes

Customers can control where data is stored and processed (EU or US); Gemini Notebook does not follow data region settings.

Source:

Zero-retention option

Unknown

Not stated on the Google pages we checked.

Pages checked:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

PageCheckedFingerprint
https://support.google.com/a/answer/15706919?hl=enOct 17, 2026698221affd10…
https://workspace.google.com/security/ai-privacy/Oct 17, 2026623fc3568098…

Compare with

See all Assistant tools · Why AI training on your data matters · How we source and verify this