Google Workspace offers improved Zero Trust control leveraging Google AI. Better “digital sovereignty” tools for the public sector are being rolled out within Workspace.

Artificial intelligence is everywhere, including Google Workspace. This allows employees to work more efficiently when needed, but now so does the IT team. You can now leverage AI to refine the current Zero Trust security model.

Zero Trust already incorporates Data Loss Prevention (DLP) and Context-Aware Access (CAA), but now you can also enable AI to continuously label and group data in Google Drive. As a result, companies can be more certain that the data is being passed on correctly and is protected from hackers. Workspace also adds context-aware DLP to Drive. IT teams can set criteria such as the location of the device and its security status.

Google now also offers comprehensive DLP control within Gmail. This allows security teams to better regulate what sensitive information must remain within corporate walls and what email is allowed to leak outside.

Private encryption keys for organizations

In addition to AI innovations, Google also brings new ones to the market Digital sovereigntyTools for large companies and the public sector. By using their own encryption key (CSE, client-side encryption), companies can add an extra layer of data protection. This makes external access by Google or a (foreign) government impossible.

Starting today, CSE also works in Google mobile apps, specifically Google Calendar, Gmail, and Meet. Organizations can also choose CSE as the default for guests in Meet, comments in Docs, and the ability to view, modify, or convert Excel files.

Google has partnered with Thales, Stormshield and Flowcrypt where companies can store their encryption keys.

Finally, Google Workspace adds a number of other security features. An important aspect is the obligation to 2FA for company administrators. Different admins can now also enable additional approval of other admins to perform confidential actions. Workspace admins can now also export logs to Chronicle to identify rarities.