Is my data safe when using Gemini Enterprise for internal documents?

All answers to this question.

With Gemini Enterprise, Business, or Education editions, your data is strictly protected. Google explicitly states that your prompts, the data you upload, and the responses generated are NOT used to train Google’s public models. Your interactions stay within your organization’s Google Workspace tenant. This is a massive distinction from the free consumer version of Gemini. Additionally, it inherits the same enterprise-grade security and compliance standards as the rest of Google Workspace, including SOC 2/3 and HIPAA support. You can safely summarize your contracts knowing they remain private to your domain.

   Answered 2024-06-12 by Patricia Williams

Does your team have "Client-Side Encryption" (CSE) enabled? It’s worth noting that if you use CSE on certain files, Gemini might not be able to read them for summarization because it respects those strict access barriers.

   Answered 2024-06-13 by David Clark

• David, we don't use CSE for everything, but that is a vital detail for our top-secret folders. Patricia, your explanation about the "tenant isolation" finally convinced our CTO. We’ve verified the terms in the Google Cloud Data Processing Addendum (CDPA), and it confirms that the data ownership remains 100% with us. We're moving forward with a small pilot group next week to start summarizing our vendor agreements.

     Commented 2024-06-14 by Robert Evans

You can also check the Admin console to see exactly how long the conversation history is stored. Admins can set it to auto-delete after a specific period for extra security.

   Answered 2024-06-15 by Jennifer Davis

• I agree with Jennifer; managing the retention policy is the final piece of the puzzle for compliance. It gives you total control over the data lifecycle.

     Commented 2024-06-16 by Patricia Williams