January 14, 2026
SecOps data connector now available for Google Workspace for Education Plus and Standard
What’s changing
We’re expanding the availability of the Google Workspace SecOps data connector to customers using Google Workspace for Education Plus and Education Standard. This feature was previously only available for our Enterprise customers.
The SecOps data connector allows you to seamlessly forward all your Google Workspace activity logs (including Gmail, Drive, Calendar, and more) into the Google SecOps platform (formerly Chronicle Security Operations).
This feature is critical for organizations, especially in the education sector, to maintain a strong security posture. By centralizing your Workspace audit data with other security telemetry, you can:
- Enhance threat detection: Gain a unified view to correlate activity logs across your entire IT environment, making it easier to spot complex or coordinated threats like unauthorized data access, insider threats, and malicious email activity.
- Improve incident response: Streamline your security workflows. With all data in one place, your security team can investigate incidents faster and automate responses, such as suspending compromised accounts or revoking file access.
- Meet compliance and auditing needs: Easily maintain a long-term, searchable archive of activity logs to meet regulatory requirements and simplify internal and external audits.
Getting started
- Admins: Configure the forwarding of Google Workspace audit logs to the Google SecOps platform in the Admin console. Visit the Help Center to learn more.
Rollout pace
- Rapid Release and Scheduled Release domains: Available now
Availability
- This change impacts the following Google Workspace for Education Standard and Plus editions. Your organization must have an active Google SecOps subscription to utilize this data connector.
Resources
- Google Workspace Admin Help: Export log events to Google Security Operations to monitor insider risk
- Google SecOps: The intelligence-driven and AI-powered security operations platform