Google Vertex AI (Gemini Enterprise Agent Platform)
Headquarters: United States. Trust center or security page: cloud.google.com. Checked 2026-10-29. API prices: price tracker.
Certifications and attestations
| Name | Scope | Source |
|---|---|---|
| FedRAMP High | This service | cloud.google.com |
| ISO/IEC 27001 | Company-wide (whole cloud) | cloud.google.com |
| ISO/IEC 27017 | Company-wide (whole cloud) | cloud.google.com |
| ISO/IEC 27018 | Company-wide (whole cloud) | cloud.google.com |
| ISO/IEC 27701 | Company-wide (whole cloud) | cloud.google.com |
| ISO/IEC 42001 | Company-wide (whole cloud) | cloud.google.com |
| SOC 2 | Company-wide (whole cloud) | cloud.google.com |
| C5 | Company-wide (whole cloud) | cloud.google.com |
Reports are usually available under NDA from the trust center. A company-wide certificate doesn't always cover every AI product; check the report's scope.
HIPAA: not published
We found no statement about this on the provider's trust center, docs or terms. That doesn't mean the answer is no; ask the provider.
Zero data retention: Configurable
“To achieve zero data retention, customers must take specific a”
Zero retention needs specific settings (for example turning off caching and abuse logging exceptions); see the page.
Source: cloud.google.com
Training on API data: Not used for training by default
“Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction.”
Source: cloud.google.com
EU data residency: unknown
Global and non-global (regional) endpoints are offered (~10% uplift for regional); which EU regions host which model is not listed on the pricing page.
Source: cloud.google.com
From the BranoLabs price tracker provider registry.
Data processing agreement: mentioned at cloud.google.com.
Something changed or wrong? Use the bug link in the footer. Back to all providers.