Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.
AI Terms Tracker
Get weekly changes

Does Vertex AI (Gemini on Google Cloud) train on your data?

Business plan Google · Model API · Last verified

Doesn't train by default

Doesn't train on business data by default.

Short answer: No

Google won't use your data to train or fine-tune any AI/ML models without prior permission (now branded Gemini Enterprise Agent Platform).

Source: cloud.google.com/vertex-ai/generative-ai/docs/data-governance

Why this matters: A "no" keeps your prompts and files out of Google's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →

3/7 assurances found·5 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Vertex AI (Gemini on Google Cloud), each linked to Google's own page.

Summary of Google's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with Google before relying on it.

Trains on your data by default

No

Google won't use your data to train or fine-tune any AI/ML models without prior permission (now branded Gemini Enterprise Agent Platform).

Source:

Data retention

Limited periods by feature

E.g. in-memory cache deleted within 24h; Grounding with Google Search logs up to 3 days; Deep Research session data 7 days; abuse-monitoring prompt logging.

Source:

SOC 2 Type II

Unknown

Not stated on the Google pages we checked.

Pages checked:

ISO/IEC 27001

Unknown

Not stated on the Google pages we checked.

Pages checked:

ISO/IEC 42001

Unknown

Not stated on the Google pages we checked.

Pages checked:

DPA available

Yes

Covered by Google's Cloud Data Processing Addendum (CDPA).

Source:

BAA / HIPAA

Unknown

Not stated on the Google pages we checked.

Pages checked:

Data residency options

Yes

Regional and multi-regional endpoints adhere to data residency; global endpoint may serve from any region.

Source:

Zero-retention option

Yes

Zero data retention achievable if customer takes specific actions (e.g. abuse-logging exception, avoid Grounding with Google Search).

Source:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

PageCheckedFingerprint
https://cloud.google.com/vertex-ai/generative-ai/docs/data-governanceOct 17, 2026b14b2d23ff24…
https://cloud.google.com/vertex-ai/generative-ai/docs/vertex-ai-zero-data-retentionOct 17, 2026b14b2d23ff24…

Compare with

See all Model API tools · Why AI training on your data matters · How we source and verify this