LLM API Compliance
Providers / Google Vertex AI (Gemini Enterprise Agent Platform)

Google Vertex AI (Gemini Enterprise Agent Platform)

Headquarters: United States. Trust center or security page: cloud.google.com. Checked 2026-10-29. API prices: price tracker.

Certifications and attestations

NameScopeSource
FedRAMP HighThis servicecloud.google.com
ISO/IEC 27001Company-wide (whole cloud)cloud.google.com
ISO/IEC 27017Company-wide (whole cloud)cloud.google.com
ISO/IEC 27018Company-wide (whole cloud)cloud.google.com
ISO/IEC 27701Company-wide (whole cloud)cloud.google.com
ISO/IEC 42001Company-wide (whole cloud)cloud.google.com
SOC 2Company-wide (whole cloud)cloud.google.com
C5Company-wide (whole cloud)cloud.google.com

Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.

HIPAA: not published

We found no statement about this on the provider's trust center, docs or terms. That doesn't mean the answer is no; ask the provider.

Zero data retention: Configurable

“To achieve zero data retention, customers must take specific a”

Zero retention needs specific settings (for example turning off caching and abuse logging exceptions); see the page.

Source: cloud.google.com

Training on API data: Not used for training by default

“Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction.”

Source: cloud.google.com

EU data residency: unknown

Global and non-global (regional) endpoints are offered (~10% uplift for regional); which EU regions host which model is not listed on the pricing page.

Source: cloud.google.com

From the BranoLabs price tracker provider registry.

Data processing agreement: mentioned at cloud.google.com.

Something changed or wrong? Use the bug link in the footer. Back to all providers.