What’s changing
Admins can now set client-side encryption (CSE) to be on by default on Android and iOS for:
- Newly drafted Gmail messages and replies
- Newly created Google Calendar events
- Newly uploaded Google Drive files
Client-side encryption in Gmail
Admins can now set client-side encryption as the default mode for users on both web and mobile that regularly handle sensitive data. This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. Each new email, event and uploaded file on mobile is automatically client-side encrypted with customer managed keys meaning the user is compliant with their org’s policy from the outset. For organizations with strict regulatory or sovereignty requirements, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data while on the go.
For more information, check out our original announcement.
Getting started
- Admins: This feature will be OFF by default and can be configured at an OU level. Visit the Help Center to learn more about client-side encryption.
- End users: Use our Help Center to learn more about working with encrypted files in Drive, Docs, Sheets & Slides.
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on February 29, 2024
Availability
- Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only. For more information, contact your Google account representative.
Resources
- Google Workspace Updates: Set client-side encryption as the default mode for new emails, events, and files
- Google Workspace Admin Help: About client-side encryption
- Google Workspace Blog: Google Workspace expands data privacy controls to Gmail and Calendar with client-side encryption
- Google Help: Get started with encrypted files in Drive, Docs, Sheets & Slides
- Cloud Blog post: Announcing Assured Controls and expanded Data Regions coverage for Google Workspace