June 3, 2026
Enhanced data protection for managed third-party apps
Previously, data transfers from corporate Google Workspace accounts to third-party apps were restricted. We’re now recalibrating these restrictions to allow for a "trusted ecosystem" between managed apps.
With this release, users are now able to maintain efficient workflows and securely move data between corporate Workspace accounts and other authorized, managed third-party applications without being blocked. For added data protection, this capability strictly prevents the transfer of that data to personal accounts within the same managed Google application or to unmanaged personal apps.
For example, a user is able to copy a client's email address from their corporate Gmail account and successfully paste it into a managed third-party CRM application. When they try to paste that same email address into their personal Gmail account, they are blocked and receive the following message: "This information can only be shared within your organization's Google Workspace apps.”
Getting started
- Admins: This feature will be OFF by default and can be enabled at the OU level. Admins can leverage iOS AppConfig through their MDM provider to enforce these restrictions for each Workspace app. Visit the Help Center to learn more about preventing accidental data leaks on iOS devices.
- End users: There is no end-user setting for this feature.
Rollout pace
- Rapid Release and Scheduled Release domains: Available now
Availability
- Enterprise: Enterprise Standard and Plus
- Education: Education Standard and Plus
- Other Editions: Frontline Standard; Enterprise Essentials Plus; Cloud Identity Premium
Resources
- Google Workspace Admin Help Center: Prevent accidental data leaks on iOS devices