The growth of the cloud has thrust the issue of security and trust into the spotlight. That’s because cloud services operate very differently from traditional on-premises technology. Rather than residing on local servers, content is now managed on Google servers that are part of our global data center network. In the past, organizations felt that they had complete control over how infrastructure was run and who operated it. This paper outlines Google’s approach to security and compliance for G Suite, our cloud-based productivity suite.