Vendor record

What Google promises about your data.

Where Google publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes: Google lists its sub-processors at workspace.google.com/intl/en/terms/subprocessors.html. We last read it on November 15, 2026.
What has changed: We've recorded no change to its sub-processor list or data processing agreement between September 10, 2026 and October 16, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
Its window: When it adds a sub-processor, its clause at cloud.google.com/terms/data-processing-addendum (read November 14, 2026) gives you 30 days' notice.

Window: 30
Sub-processors: 101
Pages: 6
Copies: 27

Google DPA

Google's data processing agreement gives 30 days' notice before a new sub-processor is engaged. Here is the clause, from our November 14, 2026 copy:

days' notice

“When Google engages any New Subprocessor during the Term, Google will, at least 30 days before the New Subprocessor starts processing any Customer Data, notify Customer of the engagement (including the name, location and activities of the New Subprocessor).”

Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Google published it.

cloud.google.com/terms/data-processing-addendum · read 2026-11-14 · fingerprint 412a193b3dab0ea3…

Notice windows across every vendor we watch

Google sub-processors

Google publishes a sub-processor list at workspace.google.com/intl/en/terms/subprocessors.html; we last read it on November 15, 2026. It names 101 entries. The first 15, as the list prints them: Accenture Inc.; Accenture Bulgaria EOOD; ACCENTURE CENTRAL EUROPE BV AMSTERDAM OLANDA-SUCURSALA BUCURESTI; Accenture International Limited; Accenture Japan Ltd; Accenture LLP; Accenture S.C; Accenture Sdn Bhd; Accenture Solutions Pvt. Ltd.; Asa G.K.; CallPoint New Europe EAD d/b/a Telus International Europe; Charter Investments Limited; CogDev Malaysia SDN. BHD; Cognizant (GB) Limited - Israel Branch; Cognizant Japan KK; and 86 more in the full table below. The public record holds no change to the list read before October 16, 2026. A change we read after October 16, 2026 is published 30 days after we read it.

101 named · full table

Every public change we have recorded · Where vendors publish their lists

How long Google keeps your data

Five statements on retention, quoted from its own pages. Google's data processing agreement (cloud.google.com/terms/data-processing-addendum, in the copy read November 14, 2026) says: “Google will comply with this Instruction as soon as reasonably practicable and within a maximum period of 180 days, unless European Law requires storage, where European Data Protection Law applies, or applicable law requires storage, where any other Applicable Privacy Law applies. 6.2 Return or Deletion When Term Ends.”

Retention

“It helps us detect and avoid unsafe requests or responses in the future. - Retained for up to 3 years. Reviewed feedback, associated conversations, and related data are retained for up to 3 years, disconnected from your Google Account. Learn how to send feedback or report a problem with Gemini Apps.”

support.google.com/gemini/answer/13594961 · read 2026-11-10

Retention

“After a recovery period of up to 30 days from that date, Google will comply with this Instruction as soon as reasonably practicable and within a maximum period of 180 days, unless European Law requires storage, where European Data Protection Law applies, or applicable law requires storage, where any other Applicable Privacy Law applies. 6.3. Deferred Deletion Instruction.”

cloud.google.com/terms/data-processing-addendum · read 2026-11-14

Retention

“You can change this to 3 or 36 months, or choose not to auto-delete.”

support.google.com/gemini/answer/13594961 · read 2026-11-10

Retention

“For example, Google stores your chats with your account for 72 hours so it is available in case of a potential system failure.”

support.google.com/gemini/answer/13594961 · read 2026-11-10

Training on customer data

“Files you add to your Notebook as a source in Gemini are not used directly for training our generative AI models. ### Avatars What happens to my data when I create an avatar in Gemini Apps? Creating an avatar involves recording your voice and face.”

support.google.com/gemini/answer/13594961 · read 2026-11-10

Training on customer data

“Additional Definitions.** - “Account”, if not defined in the Agreement, means Customer’s Google Skills for Organizations Customer Account. - “GSO” means educational, training, and learning services and content provided through https://skills.google (or another website operated or controlled by Google and used for purposes of Google Skills for Organizations). - “TSS” means technical support …”

cloud.google.com/terms/data-processing-addendum · read 2026-11-14

Training on customer data

“And we use your information to make improvements to our services — for example, understanding which search terms are most frequently misspelled helps us improve spell-check features used across our services. ### Develop new services We use the information we collect in existing services to help us develop new ones.”

policies.google.com/privacy · read 2026-11-03

Training on customer data

“Human reviewers (including trained reviewers from our service providers) review some of the data we collect for these purposes. Please don’t enter confidential information that you wouldn’t want a reviewer to see or Google to use to improve our services, including machine-learning technologies. How Gemini Apps get help from Google services”

support.google.com/gemini/answer/13594961 · read 2026-11-10

Training on customer data

“That information doesn’t require a license because it’s considered common knowledge that everyone’s free to use. - feedback that you offer, such as suggestions to improve our services.”

policies.google.com/terms · read 2026-10-27

Retention windows vendors publish · What vendors say about training

Stated

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Sub-processors named · 101

Accenture Inc.