Last checked:
Scorecard › Is Gemini safe for business?
Is Gemini safe for business?
Best-graded plan: Gemini in Google Workspace (A). Gemini in Google Workspace does not train on your data by default. Gemini app (personal account) can use your data for training unless you opt out.
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| app (personal account) | D | yes while Keep Activity is on (default state not stated) | yes | Auto-delete 18 months by default; human-reviewed chats kept up to 3 years; 72 hours with Keep Activity off | no (personal accounts use the Google Terms of Service; the Cloud DPA covers Workspace accounts) | unknown |
| in Google Workspace | A | no | no | Gemini app: admin-set auto-delete after 3, 18 (default) or 36 months; 72 hours if history is off. Gemini in Workspace apps: 90 days to indefinite, set by admins | yes (Cloud Data Processing Addendum covers Workspace) | yes (Gemini has SOC 1/2/3) |
Sources: app (personal account) · in Google Workspace
D Gemini app (personal account)
Used for training and human review while Keep Activity is on. Reviewed chats are kept up to 3 years even after you delete them. Google warns against confidential info.
"Please don't enter confidential information that you wouldn't want a reviewer to see or Google to use to improve our services"
A Gemini in Google Workspace
No training outside your domain without permission and no human review. Admins set retention (3, 18 or 36 months) and can turn Gemini off. Covered by Google's Cloud DPA, and Gemini itself holds SOC 1/2/3.
"Your content is not human reviewed or otherwise used for Generative AI model training outside your domain without permission."
Grades describe published policies, not security testing. How we grade.
More on Gemini