Google Workspace Updates: Security and Compliance

Google Workspace Updates Weekly Recap - June 27, 2025

Friday, June 27, 2025

8 New updatesUnless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.

Providing support for Microsoft Office embedded files in Google Drive

To ensure users have a seamless experience when working with Microsoft Office files, we’re excited to announce that users can now open Microsoft Office files that contain embedded PDFs in Google Drive. | Rolling out now to Rapid Release and Scheduled Release domains. | Available to Google Workspace customers, Google Workspace Individual subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about working with Microsoft Office files.

Use Imagen 4 to generate images in Google Docs, Slides and Vids in multiple languages

Users can now utilize our highest quality image generation model, Imagen 4, which delivers:

Outstanding text rendering and prompt adherence
Higher overall image quality across all styles
Multilingual prompt support in these 20+ languages

Rolling out now to Rapid Release and Scheduled Release domains. | Available to Google Workspace Business and Enterprise users with access to Gemini in Docs and Slides, and users with access to Gemini in Vids. | Visit the Help Center to learn more about collaborating with Gemini Slides, Vids and Docs.

using spanish to generate visual content in Vids

View the most relevant search results in Gmail

Over the years, we’ve implemented updates to help you find exactly what you’re looking for with less effort when searching in Gmail. In March, we announced a smarter search feature powered by AI to quickly show users the most relevant results, and today we’re excited to extend this to businesses. Now, instead of just showing emails in chronological order based on keywords, Gmail search results will factor in elements like recency, most-clicked emails and frequent contacts. With this update, the emails you’re looking for are far more likely to be at the top of your search results — saving you valuable time and helping you find important information more easily. You can also select between “most relevant” and “most recent” results. | Rollout to Rapid Release and Scheduled Release domains is complete. | Available to Google Workspace customers, Google Workspace Individual subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about the search in Gmail.

A search view before and after. Now, search results are sorted by relevance instead of in chronological order to help you find your intended result, faster.
Automated meeting recording, transcripts and notes available in seven additional languages
Currently, when an Admin pre-configures meeting recordings, meeting transcripts, or “Take notes for me” in Meet as ON by default for newly created meetings, the artifacts are generated in English. Today, we’re expanding the language availability to include:

French
German
Italian
Japanese
Korean
Portuguese
Spanish

The meeting artifacts will automatically be generated in the meeting host’s language if it is supported. | Rolling out now to Rapid Release and Scheduled Release domains. | Meeting recordings and transcripts are available to Google Workspace Business Plus; Enterprise Essentials, Enterprise Essentials Plus; Enterprise Standard, Plus; Education Plus, and the Teaching and Learning add-on. “Take notes for me” is available to Business Standard and Business Plus; Enterprise Standard and Enterprise Plus; the Gemini Education and Education Premium add-on and those customers who previously purchased a Gemini Business, Gemini Enterprise or AI Meetings & Messages add-on. | Admins visit the Help Center to learn more about choosing automatic meeting artifact settings for your organization. | End users visit the Help Center to learn more about recording a meeting, using meeting Transcripts, and taking notes with Gemini in Meet. Meeting hosts and co-hosts can edit these settings in the Calendar invite, as well as turn these artifacts off during the meeting.

Studio lighting in Google Meet is now available on all devices

We’re pleased to announce that studio lighting in Google Meet is now available on all devices. Using machine learning, Gemini in Meet will simulate studio-quality lighting and adjust light position and brightness in your video feed, so you're perfectly lit for your meeting. | Available now. | Rollout to Rapid Release and Scheduled Release domains is complete. | Available for Google Workspace Business Standard and Plus, and Enterprise Standard and Plus. | Visit the Help Center to learn more about improving your video experience.

Video file uploads are now available to Google Workspace users in the Gemini mobile app

You can now upload videos stored on your mobile device to provide more context to your prompts in the Gemini mobile app. You can ask Gemini to summarize the video, ask Gemini specific questions about the video and more. | Rollout to Rapid Release and Scheduled Release domains is complete. | Available to all Google Workspace users with access to the Gemini app. | Visit the Help Center to learn more about how to upload and analyze files in the Gemini Apps.

Boost productivity with scheduled actions in Gemini

You can now use scheduled actions in Gemini to create personalized updates, set reminders, or complete routine tasks in a chat or based on existing prompts. You can set these actions to your preferred frequency, be it a single reminder, or daily or weekly updates. Some ways you can use scheduled actions are:

Daily summaries of your calendar, to-do list, and unread emails for the day ahead.
Daily news briefings: deliver a concise, easy-to-digest summary of the day’s top news stories or a specific topic.
Competitive landscape monitoring: Monitor online news, press releases, social media content, and more based on a specific industry.
Weekly vocabulary builders: Receive a curated list of new vocabulary words, complete with definitions and example sentences, tailored to your learning level.

Rollout to Rapid Release and Scheduled Release domains is complete. | Available with a qualifying edition of Google Workspace for Gemini on the web and mobile and in all supported languages. This feature is only available for users 18+ at this time. | Admins: For Gemini to access data from apps like Gmail, Calendar, and Drive, Workspace apps in Gemini must be turned ON. | End users: Visit the Help Center to learn more about scheduling actions in Gemini.

Google Drive log events now include search related information

We’re expanding Drive log events in the security investigation tool to include search events. This includes information on resources returned from a search, the query the user entered, and more. Admins can use this information to help assess whether there is normal search behavior or whether the behavior was anomalous and indicating potential data exfiltration. This information can also be queried via API – check out our API documentation for more information. | Rollout to Rapid Release and Scheduled Release domains is complete. | Available for Google Workspace Business Starter, Standard, and Plus; Enterprise Starter, Standard, and Plus; Education Fundamentals, Standard, and Plus; Frontline Starter and Standard. | Visit the Help Center to learn more about Drive log events and the security investigation tool.

Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.

Adding granular control options for who can respond to existing Google Forms

In addition to being available on newly created forms, we’re excited to announce that starting today this option is now available on existing forms. As a result, form creators can upgrade existing or old forms to have more granular controls over who can respond to them. | Learn more about controls for existing forms.

Google Classroom now supports exporting grades and importing data with STLink SIS

Google Classroom teachers can now export and import select information via the new integration with Bubblecon STLink, a South Korean third-party student information system (SIS) that provides an innovative edtech platform. | Learn more about Bubblecon STLink.

Changes to "Who can manage" and "Who can view" members in Google Groups starting September 15, 2025

There are upcoming changes to permissions in Google Groups which will be implemented starting September 15, 2025. | Learn more about changes to Google Groups.

Generate data with Gemini in Google Sheets

Currently, you can utilize Gemini in Google Sheets to generate charts and valuable insights, and this week, we’re excited to bring AI directly into the cells of your spreadsheet with the power of AI function. | Learn more about AI function in Sheets.

See summaries of even more file types directly in Google Chat

Earlier this year, we introduced the ability for users to easily summarize Google Docs, Slides, and Sheets files shared within a Google Chat conversation. Today, we’re excited to expand this feature to PDF, Office (Word, Excel, PowerPoint), CSV, txt, and zip files shared as Drive links in Chat. | Learn more about summaries in Chat.

Updates to the GitHub app for Google Chat

We're announcing additional updates and functionality that improve upon the overall experience using the GitHub app for Google Chat. | Learn more about GitHub app for Google Chat.

Gemini Add-ons will no longer appear under subscriptions in the Admin console for Workspace Business and Enterprise customers

In January 2025, we announced our plan to bring premium AI features directly to our Business and Enterprise offerings, helping our customers and their users boost productivity, creativity, and innovation, transforming how they work. We also stopped charging for Gemini add-ons that you may have purchased previously for your Business and Enterprise offerings after January 31, 2025. | Learn more about add-on subscriptions.

Introducing Google AI Ultra for Business: Providing Access to Advanced AI Features and Next-Gen tools

We’re pleased to introduce Google AI Ultra for Business, a new Workspace add-on that provides the highest access to AI features and models and access to next-generation AI tools. | Learn more about Google AI Ultra for Business.

Introducing more granular controls for multi-party approvals for sensitive admin actions

Last year, we introduced multi-party approval (MPA), a security feature that requires an admin to approve certain sensitive actions initiated by another admin. Today, we’re enhancing this feature by giving admins more granular controls. | Learn more about granular controls for multi-party approvals.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains:

Join a meeting using “companion mode” from Android and iOS tablets (Android)

Scheduled Release Domains:

Scan documents easier using Google Drive on Android devices
Google Meet now offers customizable caption styling

Rapid and Scheduled Release Domains:

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Introducing more granular controls for multi-party approvals for sensitive admin actions

Friday, June 27, 2025

What’s changing Last year, we introduced multi-party approval (MPA), a security feature that requires an admin to approve certain sensitive actions initiated by another admin. Today, we’re enhancing this feature by giving admins more granular controls, specifically:

Admins can now select which specific settings require multi-party approval.
Admins can choose separate multi-party approval settings for actions that are supported via API and the admin console, such as configuring single-sign on with a third-party identity provider.
Super admins can now delegate specific admins to approve MPA actions using the new multi-party approval role for admins.

You can configure multi-party approval on a per action basis by going to Security > Authentication > Multi-party approved settings in the Admin console

Account > Admin Roles

Who’s impacted Admins
Why it’s important Multi-party approval adds an extra layer of security for sensitive actions taken in the admin console by ensuring sensitive actions are not implemented in a silo and, more importantly, helps prevent unauthorized or accidental changes from being made.
We understand each customer has their own unique definition of security and what constitutes a high-risk action. By introducing more granular controls, we’re giving our customers the authority to decide what features should be subject to multi-party approvals and who has the authority to review these actions, in a way that works best for them, rather than the experience being “all or nothing”.

Additional details To further strengthen security around sensitive actions, admins now require both 'reviewer' and 'requester' privileges for a given action to conduct its MPA review. This ensures that the approving admin possesses the direct authority to perform the action themselves, reinforcing the integrity of the approval process and preventing approvals from individuals with inadequate underlying permissions.
Getting started

Admins: This feature is available for eligible Workspace customers with two or more super admin accounts. Multi-party approval is OFF by default and can be turned on in the Admin console by going to Security > Multi-party approval settings. Visit the Help Center to learn more about multi-party approval for sensitive actions and pre-built admin roles.
End users: There is no end user impact or action required.

Rollout pace

Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 27, 2025. We anticipate rollout to be complete by the end of July 2025.

Availability

Available to Google Workspace

Enterprise Standard and Plus
Education Standard and Plus

Also available to Cloud Identity Premium customers

Resources

Google Workspace Admin Help: Multi-party approval for sensitive actions
Google Workspace Admin Help: Prebuilt administrator roles

Adding granular control options for who can respond to existing Google Forms

Monday, June 23, 2025

What’s changingLast year, we introduced a feature that gives Google Forms creators more granular control over who can respond to their newly created forms via sharing settings. Specifically, form creators can limit response access to specific users, groups, or target audiences—similar to how file owners can restrict the sharing of Google Docs, Sheets, Slides or Sites in Drive.
In addition to being available on newly created forms, we’re excited to announce that starting today this option is now available on existing forms. As a result, form creators can upgrade existing or old forms to have more granular controls over who can respond to them.

Adding granular control options for who can respond to existing Google Forms

Who’s impacted End users
Why you’d use it This feature is useful in any scenario where you’d like to control who can respond to a form. For example, business leaders can better collect feedback from specific organizational units and prevent the form from being responded to by other teams or organization units. Similarly, teachers can use this to ensure a quiz is only accessible to select students who receive the link.
Getting started

Admins: There is no admin control for this feature.
End users:

Form creators must publish their form to enable responders to view the form or submit a response.
Form creators can see who has access to the form and share response access to specific users, groups, or target audiences.
Visit the Help Center to learn more about upgrading your Google Form to have better access control.

Rollout pace

Rapid Release domains: Gradual rollout (up to 15 days for feature visibility) starting on June 23, 2025
Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on July 8, 2025

Availability

Available to all Google Workspace customers and users with personal Google Accounts

Note: The target audiences feature mentioned above is only available for the Google Drive and Docs and Google Chat services. Supported editions for this feature on Drive, Docs & Chat include: Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, Enterprise Essentials and Enterprise Essentials Plus. Supported editions for this feature on Drive & Docs only include: Business Standard, Nonprofits and G Suite Business.

Resources

Data migration log events are available in the Admin console

Tuesday, June 17, 2025

What’s changing Beginning today, you can now access log events for the new data migration service in the audit and investigation tool and the security investigation tool. You can search across a variety of attributes including:

Who started a migration
What data is being migrated
When the migration was set up or executed, and more.

Log events give admins clear insight into data migration activities in their organization, providing insights into who initiated the migration, the type of data involved, the migration progress, and even allows for proactive issue triaging and resolution.

For Google Workspace customers with access to the security investigation tool, you can find more information on each migrated object, troubleshoot issues, create custom rules, and more. And for select Google Workspace customers, log events can be exported to BigQuery for further analysis and custom reporting. See below for more information on availability.

Data migration log events in the security investigation tool

Getting started

Rollout pace

Data migration log events in the security investigation tool: Available now.
BigQuery exports: Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on June 17, 2025

Availability

The audit and investigation tool is available for all Google Workspace customers.

The security investigation tool is available for Google Workspace:

Enterprise Standard and Plus
Education Standard and Plus
Enterprise Essentials Plus
Frontline Standard
Cloud Identity Premium

Exporting logs to BigQuery is available for Google Workspace:

Enterprise Standard and Plus
Education Standard and Plus
Enterprise Essentials Plus
Frontline Standard

Resources

Google Workspace Updates Weekly Recap - June 13, 2025

Friday, June 13, 2025

1 New updateUnless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.

Mitigating prompt injection attacks with a layered defense strategy

This week, we shared more details on how we protect Gemini and mitigate threats from malicious actors utilizing indirect prompt injection attacks to exfiltrate user data or execute other rogue actions. Google takes a layered security approach, with security measures designed for each stage of the prompt lifecycle. From Gemini 2.5 model hardening, to purpose-built machine learning (ML) models detecting malicious instructions, to system-level safeguards, we are meaningfully elevating the difficulty, expense, and complexity faced by an attacker.

Our model training with adversarial data significantly enhanced our defenses against indirect prompt injection attacks in Gemini 2.5 models. This inherent model resilience is augmented with additional defenses that we built directly into Gemini, including:

Prompt injection content classifiers
Security thought reinforcement
Markdown sanitization and suspicious URL redaction
User confirmation framework
End-user security mitigation notifications

This layered approach to our security strategy strengthens the overall security framework for Gemini – throughout the prompt lifecycle and across diverse attack techniques.

You can read the full blog post, “Mitigating prompt injection attacks with a layered defense strategy,” on the Google Online Security Blog.| Rolling out now to Rapid Release and Scheduled Release domains. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn:

Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.

New class analytics and insights for educators in Google Classroom

Teachers can view data via an “Analytics” tab on their class pages. In addition, teachers will be able to see relevant insights on the class analytics page that alert them on how students are progressing and where they may need additional support. | Learn more about class analytics in Classroom.

Use Gemini in Google Docs on Android devices in 20+ languages

We’re excited to bring the power of Gemini in Docs to your Android devices so that you can understand, summarize, and ask questions about documents on mobile. As a result, you can use Gemini to surface insights and key points on-the-go. Plus, Gemini in Docs on Android is available in 20+ languages. | Learn more about Gemini in Docs on mobile.

Audit reports for data regions are now available in the Admin console

Using the security investigation tool, admins can now access a new data set: policy compliance log events. Admins can use these logs to view a list of their Assured Controls users, their assigned data regions, and any advanced data region settings. | Learn more about audit reports.

Data regions support for Gemini features in Google Workspace is now available

Beginning this week, Gemini features in Google Workspace apps, like Gemini in the side panel of Workspace apps or “Help me write” in Google Docs, for example, will now adhere to your organization’s data regionalization requirements. | Learn more about data regions support.

Generate fully editable charts using Gemini in Google Sheets

Earlier this year, we introduced the ability for Gemini to provide insights and generate charts based on your data in Google Sheets. At that time, the generated charts could only be inserted as static images over cells in a spreadsheet. Starting this week, Gemini can produce fully editable charts that regenerate if the spreadsheet data changes. | Learn more about editable charts in Sheets.

Generate video clips with sound using Veo 3 in Google Vids

We're introducing our newest model, Veo 3, that enables users to generate 8-second videos with higher quality and realistic sound. | Learn more about Veo 3 in Vids.

Migrate email and calendar content from Microsoft Exchange Online to Google Workspace

The ability to migrate email from Microsoft Exchange Online to Google Workspace, part of our new Data migration service, is now generally available. | Learn more about email migration.

Use Gemini in Google Forms to summarize form responses

To help you quickly gain insights from responses to Google Form short-answer or paragraph questions, we’re introducing AI-generated text summarizations. | Learn more about Forms summaries.

Use Gemini in Google Forms to quickly create a new form

With Help me create in Forms, users can craft a form by entering a prompt that describes the form they want to create or a prompt that references supporting Docs, Sheets, Slides or PDFs. Gemini will then generate a draft form, incorporating details from any files you reference, that can be used instantly or further customized. | Learn more about Help me create in Forms.

Introducing PDF summary cards in Google Drive

We’re excited to expand the capabilities of Gemini in Drive files by introducing PDF summary cards. | Learn more about PDF summary cards.

New host management control for who can ask to join a meeting

Meeting hosts can now control who can request to join a meeting (also known as “knocking”). | Learn more about host controls.

Join a meeting using “companion mode” from Android and iOS tablets

You can use companion mode on Apple iPads & Android tablets and foldable devices. | Learn more about companion mode in Meet.

Introducing the Comeen Workplace AI Agent for the Comeen Google Chat app

We’re excited to announce the next evolution of the Comeen app: the Workplace AI Agent. This powerful assistant uses generative AI to help users complete key workplace actions using natural language. From bookings to workplace knowledge, everything happens in seconds through simple prompts. | Learn more about the Comeen Google Chat app.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Scheduled Release Domains:

Introducing video engagement insights in Google Drive
New Gemini summary cards now available in the Gmail app on Android and iOS devices

Rapid and Scheduled Release Domains:

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

Data regions support for Gemini features in Google Workspace is now available

Monday, June 9, 2025

What’s changingBeginning today, Gemini features in Google Workspace apps, like Gemini in the side panel of Workspace apps or “Help me write” in Google Docs, for example, will now adhere to your organization’s data regionalization requirements. As with other data, Admins have the flexibility to configure controls for EU processing, US processing, or both, including granular settings down to the organizational unit (OU) level.

Who’s impacted

Admins

Why it matters

Data regions are critical for ensuring many customers can meet their own internal requirements, as well as other legal, regulatory, and data sovereignty requirements by controlling the geographical location of their data at rest. Expanding these controls to Gemini features in Google Workspace allows our customers to adopt Gemini features broadly in their organization with confidence that their data is being processed and stored in the location they require.

Getting started

Rollout pace

Rapid Release and Scheduled Release domains: Available now.

Availability

Available for Google Workspace Enterprise Plus customers, as well as the Assured Controls and Assured Controls Plus add-on

Resources

Audit reports for data regions are now available in the Admin console

Monday, June 9, 2025

What’s changing Using the security investigation tool, admins can now access a new data set: policy compliance log events. Admins can use these logs to view a list of their Assured Controls users, their assigned data regions, and any advanced data region settings.

Policy compliance log events in the security investigation tool

Who’s impacted

Admins

Why it’s important

Policy compliance log events help admins quickly generate detailed reports of users assigned to specific data regions, which are critical for ensuring and providing data region settings are in line with internal policies and external regulatory guidelines. Querying these logs in the security investigation tool streamlines the auditing process, saving time and effort.

Getting started

Rollout pace

Rapid Release and Scheduled Release domains: Available now.

Availability

Available for Google Workspace:

Enterprise Plus and Frontline Plus customers with Assured Controls and Assured Controls Plus

Resources

Google Workspace Admin Help: Policy compliance log events
Google Workspace Admin Help: About the security investigation tool

Available in beta: Edit client-side encrypted Microsoft Word files with Google Docs

Monday, May 19, 2025

What’s changing Launching in beta, you can now view and edit client-side encrypted Microsoft Word files in Google Docs. Any changes made are saved in the original Word format. This update makes it easy for you to leverage Google Workspace with the tools and formats you already use while preserving confidentiality of your sensitive data with client-side encryption.

Eligible Google Workspace admins can use this form to request access to the beta. We’ll share more specific instructions once you’re accepted into the beta.

In Google Docs, navigate to File > Open.

Additional details

Note that with this release:

You can only view and edit .docx Word file types. Additional Word file types are not supported.
The maximum file size is 20MB.
As we continue to improve Office editing in encrypted Google Docs, you may encounter incompatibilities for certain features. Some features may not be displayed and may not be editable, but will be preserved in the document and viewable in Microsoft Office.
Other features may be lost or altered in the latest version of the file when it is edited in Google Docs. You will see a notification within the document if editing will cause any features to be lost.

Getting started

Rollout pace

The feature will be available immediately once you're accepted into the beta.

Availability

Available to Google Workspace

Enterprise Plus
Education Standard and Plus
Frontline Plus

Resources

Granular OAuth consent in HTTP Google Workspace add-ons

Tuesday, May 6, 2025

What’s changingGranular OAuth consent is rolling out over the next few weeks for Google Workspace add-ons built using HTTP endpoints. Granular consent gives users clear choices about the data they share with third-party applications.This update is similar to an update made earlier this year with the introduction of granular OAuth consent in the Google Apps Script IDE: when someone installs or runs an HTTP Workspace add-on that supports granular consent, they will see a redesigned consent screen. Instead of being asked to authorize all requested permissions at once, users can selectively grant access to individual OAuth scopes.For example, Google Workspace add-ons can extend to multiple Workspace apps, but users might only use an add-on for some of the apps it extends. With granular consent, users can choose to grant all permissions to an add-on or grant permissions as needed when they use the add-on in each app.

This screenshot shows the new OAuth consent screen, which lets the user provide consent for a subset of the requested OAuth scopes.
Additional detailsFollowing is the timeline for developers supporting granular consent in HTTP Google Workspace add-ons:

New HTTP Google Workspace add-ons built after May 27, 2025 must support granular consent.

Existing add-ons have until December 1, 2025 to add support for granular consent.

After December 1, 2025, all HTTP Google Workspace add-ons must support granular consent.

After a user grants permission to a Google Workspace add-on that supports granular consent, the add-on might request OAuth consent again in the following cases:

The user, who has granted consent to a subset of the requested OAuth scopes, tries to run a part of the add-on that requires scopes that were not previously authorized.

The add–on is updated in such a way that it requires permission for additional scopes.

The user revoked access to the add-on from their Google Account settings.

This update does not apply to the following scenarios, for which granular consent may become available in the future:

When an admin initially installs an add-on

When an admin updates the permissions granted to an add-on from the Admin console

If a Google Workspace add-on is built in Apps Script

Getting Started

Rollout pace

Rapid Release and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on May 6, 2025, with expected completion by May 31, 2025

Availability

Available to all Google Workspace customers and Workspace Individual Subscribers

Resources

Pre-configure Gemini app conversation history admin settings before they take effect

Monday, May 5, 2025

[Update - June 5, 2025]: Rollout is complete.[Update - May 8, 2025]: This enforcement of these settings is anticipated to start on May 22, 2025. We will share another update in the coming days to provide final confirmation and further details about the rollout.

What’s changingStarting today, Workspace admins can pre-configure the new Gemini conversation history admin settings before they take effect for their Gemini app users (expected by the end of May 2025). By default, “Gemini conversation history” will be ON and ”Conversation retention” will be set to 18 months (inline with current behavior).

Generative AI > Settings > Gemini app > Gemini conversation history

Who’s impactedAdmins and end usersAdditional details

If "Gemini conversation history" is OFF, chats are saved in user accounts for up to 72 hours. This lets Google provide the service and process any feedback. This chat activity won’t appear in a user’s Gemini Apps Activity.

Regardless of whether the Gemini app history is on or off, content in chats adheres to enterprise privacy and security protections as described in the Google Workspace Terms of Service. You can also learn more in the Privacy Hub.
If you turn the setting from ON to OFF, existing user conversation history from before the setting is turned OFF is stored for the length of time specified by the "Conversation retention" setting.

This update will not impact your current Gemini app service setting.

This update will not impact Gemini in Workspace apps (e.g., Gemini in Gmail).

Getting started

Admins:

End Users:

Users cannot override the Gemini conversation history settings configured by their admin.
These admin settings will override any individual user changes previously made to their Gemini Apps Activity settings (gemini.google.com or Gemini mobile app).

Rollout pace

Rapid Release and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on May 5, 2025

We will publish a separate Workspace Updates blog post once we begin to enforce these settings, which is expected by the end of May 2025.

Availability

Available for all Google Workspace users with access to the Gemini app.

Resources

Google Workspace Admin Help: Turn the Gemini app on or off

Enhance Your Organization’s Security with Out-of-Domain File Warnings in Google Workspace

Monday, April 28, 2025

What’s changingToday we’re launching Out-of-Domain file-level warnings, now publicly available to all Google Workspace users. Specifically, a badge will be displayed on Google Docs, Sheets, and Slides files when the file is owned by or shared with someone outside of your domain. You'll also see a pop-up with more details and the option to report the externally owned file for abuse.

An image showing a Google Doc with the word "External" displayed in a small yellow badge next to the document title. The badge has been clicked, and a pop-up window appears with more information stating that “This document is owned by someone outside your organization. Be cautious about sharing sensitive information

Image of "External" badge displayed in Google Docs
This feature helps users identify potentially risky files and avoid phishing scams when working with files shared from outside your organization.

Additional details

Known Limitations:

For externally shared content, the badge will not be displayed if any internal Google Groups have access to the document, even if these groups have external members.
If any service accounts have access to the document, the External badge will be displayed, even if the service account is owned internally.

Getting started

Admins: This feature will be ON by default and can be disabled at the domain and organizational level. Visit the Help Center to learn more about turning Out-of-Domain Warnings on or off for your organization.

Screenshot of the Google Workspace Admin console, navigated to Sharing settings. At the bottom of the page, a new section labeled "Highlight external files" is highlighted. The checkbox is checked, and the description reads: "Mark external files shared or owned externally as “external” to flag that content may be viewable outside your organization.

Image of the Google Workspace Admin console, Sharing settings, showing the "Highlight external files" option enabled

End users: This feature is ON by default unless otherwise configured by your admin. There is no end user setting for this feature. Visit the Help Center to learn more about Out-of-Domain file warnings.

Rollout pace

Admin setting:

Rapid Release and Scheduled Release domains: The admin setting will start rolling out today, April 28, 2025, and continue over the next several days.

End user visibility:

Rapid Release and Scheduled Release domains: End user visibility will begin on May 5, 2025, and is expected to take six weeks to complete.

Availability

Available for all Google Workspace customers, as well as Cloud Identity customers

Resources

Data classifications labels for Gmail are now generally available

Wednesday, April 23, 2025

What’s changing In 2024 we introduced data classification labels for email in open beta, and since then we’ve introduced several feature enhancements including:

Auto-classification labeling with data loss prevention (DLP) rules.
Instant application of DLP rules and actions triggered by classification labels on the web.
“Sensitive content snippets” for Gmail messages that trigger data loss prevention rules.
Events related to labeling, like “label_applied” or “label_removed” are now included in audit logs, allowing admins to generate reports based on label values for further analysis.
Support on Android and iOS devices.

Beginning today, we are pleased to announce that data classification labels are generally available, giving admins yet another way to enhance their security posture.

Who’s impacted

Admins and end users

Why it matters

Data breaches are increasingly common and costly across all organizations, including enterprises, public sectors, and government institutions. By extending data classification labels to Gmail, Google Workspace offers admins a more comprehensive and integrated system for protecting sensitive information.

Admins can create custom labels or leverage existing Drive labels within Gmail, enabling classification of emails based on department, document type, sensitivity, and more. This allows for the creation of targeted data protection rules, such as blocking the sending of internal-labeled emails to external recipients or automatically applying a confidential label to messages containing sensitive financial data.

The instant application of auto-classification and DLP rules in Gmail provides immediate feedback to users, educating them on data protection policies and allowing them to rectify issues before emails are sent, ultimately minimizing data breaches and improving overall data security.

Finally,availability on mobile devices provides a comprehensive experience, ensuring data is protected and labeled across all user devices, whether users are sharing and accessing information from desktop devices or from mobile devices on-the-go.

Additional details

To further enhance the data classification labels experience, instant application of DLP rules and actions triggered by classification labels will soon be generally available on mobile devices. We anticipate that this functionality will be available in May – we’ll share an update once we have more information.

Getting started

Admins:

If you've been using classification labels since the open beta period, there are no changes to your experience.
If you’re new to Gmail classification labels, they can be enabled at the domain, group level, or individual user level. You also have the option to enable existing classification labels used in Drive for use in Gmail. The Label Manager tool can be accessed by going to Security > Access and data control or admin.google.com/ac/dc/labels in the Admin console. Visit the Help Center to learn more about getting started with classification labels, Gmail DLP & automatic classification labels, and preventing data leaks in email and attachments.

The Label Manager tool can be accessed in the Admin console by going to Security > Access and data control

End users: Depending on the data loss prevention rules configured by your admin, you may see a dialog letting you know that your message cannot be shared and how to fix your message so it can safely be shared. Visit the Help Center to learn more about classification labels in Gmail.

Users can apply classification labels to a message, according to the organization’s data governance policies

Classification labels on mobile when composing a message and reading a message

Rollout pace

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on April 23, 2025

Availability

The Label Manager and manual classification is available to Google Workspace:

Frontline Starter and Standard
Business Standard and Plus
Enterprise Standard and Plus
Education Standard and Education Plus
Essentials, Enterprise Essentials, and Enterprise Essentials Plus

Data loss prevention rules with labels as a condition or labels as an action are available to:

Enterprise Standard and Plus
Education Fundamentals, Standard, Plus, and the Teaching & Learning Upgrade
Frontline Standard
Cloud Identity Premium (in combination with a Workspace Edition that includes Gmail)

Resources

Google Workspace Admin Help: Gmail DLP & automatic classification labels 

Google Workspace Admin Help: Prevent data leaks in email & attachments 

Google Workspace Admin Help: Get started as a classification labels admin

Google Help: Add classification labels in Gmail

The Gemini app, as well as Gemini features in Google Workspace, are now BSI C5 certified

Thursday, April 10, 2025

What’s changing Today at Google Cloud Next 2025, we announced that the Gemini in Google Workspace apps and the Gemini App have achieved the German BSI C5 attestations – the first AI productivity assistant to achieve this certification. For our customers operating in the EU, this means they can confidently adopt and integrate AI into their work with assurances that stringent third-party auditors have determined that Gemini’s architecture meets a high bar of security and privacy.
This latest certification continues to build on Gemini’s existing, comprehensive set of safety, privacy, and security standards, including: SOC 1/2/3, ISO 27017/18, and ISO 42001 (the first international standard for AI Management Systems), as well as HIPAA compliance and as the first generative AI assistant to achieve US FedRAMP High attestations.
Getting started

Admins: Visit the Help Center to learn more about how Google Workspace satisfies certification and compliance standards and BSI C5 in general.

Availability

This update impacts all Google Workspace users accessing the Gemini in Google Workspace and the Gemini app.

Resources

Gmail data loss prevention now supports “sensitive content snippets”

Tuesday, March 18, 2025

What’s changingWe recently launched data loss prevention for Gmail and, beginning today, Admins can see “Sensitive content snippets” for Gmail messages that trigger data loss prevention rules. This content is logged in the security investigation tool and admins can use the information to better identify security risks, determine whether a false positive was returned, and decide on an appropriate course of action.Snippets are already available for DLP events for Drive, Chat, and Chrome. Visit our Help Center and our previous announcement for more information.

Matched content and information about the data detector type is displayed in the side panel under ‘Log Details’ in the Security Investigation Tool
Getting started

Admins:

Rollout pace

Rapid Release and Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on March 18, 2025

Availability

Available to Google Workspace

Frontline Standard
Enterprise Standard and Plus
Education Fundamentals, Standard, Plus, and the Teaching and Learning add-on
Enterprise Essentials Plus
Also available for Chrome Enterprise Premium

Resources

Google Workspace Admin Help: Prevent data leaks in email & attachments

Google Workspace Admin Help: View content that triggers DLP rules (beta)

Google Workspace Admin Help: Use Workspace DLP to prevent data loss

Google Workspace Admin Help: About the security investigation tool

Google Workspace Updates Blog: Workspace data loss protection (DLP) for Gmail is now generally available

Useful Links

Join the official community for Google Workspace administrators

In the Google Cloud Community, connect with Googlers and other Google Workspace admins like yourself. Participate in product discussions, check out the Community Articles, and learn tips and tricks that will make your work and life easier. Be the first to know what's happening with Google Workspace.

______________

Learn about more Google Workspace launches

On the “What’s new in Google Workspace?” Help Center page, learn about new products and features launching in Google Workspace, including smaller changes that haven’t been announced on the Google Workspace Updates blog.

______________

Updates

Google Workspace Updates Weekly Recap - June 27, 2025

Introducing more granular controls for multi-party approvals for sensitive admin actions

Adding granular control options for who can respond to existing Google Forms

Data migration log events are available in the Admin console

Google Workspace Updates Weekly Recap - June 13, 2025

Data regions support for Gemini features in Google Workspace is now available

Audit reports for data regions are now available in the Admin console

Available in beta: Edit client-side encrypted Microsoft Word files with Google Docs

Granular OAuth consent in HTTP Google Workspace add-ons

Pre-configure Gemini app conversation history admin settings before they take effect

Enhance Your Organization’s Security with Out-of-Domain File Warnings in Google Workspace

Data classifications labels for Gmail are now generally available

The Gemini app, as well as Gemini features in Google Workspace, are now BSI C5 certified

Gmail data loss prevention now supports “sensitive content snippets”

Filter by product

Filter by date

Subscribe by feed

Subscribe by email

Localized Google Workspace Updates

Useful Links

Join the official community for Google Workspace administrators

Learn about more Google Workspace launches