// Trust & Security Report
Google LLC (Google Cloud)
Looker Studio is Google's free data visualization and reporting platform (formerly Google Data Studio), with a premium paid tier (Looker Studio Pro). It enables non-technical users to create interactive dashboards and reports by connecting to various data sources via built-in and partner connectors.
Certifications held
5
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on docs.cloud.google.com“Google has earned ISO 27001 certification for the systems, applications, people, technology, processes and data centers serving a number of Google products. Ernst & Young CertifyPoint is accredited by the Dutch Accreditation Council, a member of the International Accreditation Forum (IAF).”
Verify on cloud.google.com“Google operates as a data processor for Looker Studio under the Ads Data Processing Terms incorporated in the Looker Studio Terms of Service. Customers subject to GDPR must complete required fields in User Settings, and administrators can accept data processing terms on behalf of the organization.”
Verify on cloud.google.com“Google Cloud Platform and related services, including Looker Studio, are covered by ISO 27017 certification as part of Google Cloud's broader compliance program.”
Verify on cloud.google.com“Google Cloud Platform and related services are ISO 27018 compliant, covering personal data protection in cloud services.”
> Show 2 unconfirmed / not-held certifications
source: cloud.google.comNo explicit public evidence of Looker Studio holding SOC 2 Type 1 or Type 2 certification. The premium 'Looker' BI product has SOC 2 Type 1 (GCP) and Type 2 (AWS), but this is distinct from Looker Studio. Data Studio documentation states it 'supports' SOC 2 compliance standards, meaning customers can achieve SOC 2 compliance using it, but Google has not published its own SOC 2 audit report for Looker Studio.
source: cloud.google.comLooker Studio supports HIPAA compliance within the scope of the Google Cloud Platform Business Associate Agreement (BAA). Customers must execute the BAA before using Looker Studio with PHI, and responsibility for ensuring HIPAA compliance rests with the customer. This is not a HIPAA certification held by Google, but rather support for customer HIPAA compliance.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Global (customer data stored in Google Cloud regions; EU data can be stored in EU regions per GDPR requirements)
Google does not use customer data to train its AI/LLM models without explicit permission. Data processed through Looker Studio is not used for training Google's foundation models. This policy is consistent across Google Cloud products.
// Security controls
Encryption in Transit
HTTPS with TLS encryption for all data transmitted between client and server
cloud.google.comMulti-Factor Authentication (MFA)
MFA supported and configurable via Google Workspace/Cloud Identity, with support for app-based authenticators (Google Authenticator, Authy)
cloud.google.comAudit Logging
Comprehensive audit logs tracking user activity, logins, report generation, data access, and administrative actions; available via Admin console
cloud.google.comAccess Controls
Row-level security (RLS), granular sharing controls, file permission management, and integration with Google Workspace/Cloud Identity for centralized access control
cloud.google.comVulnerability Scanning
Front-end application and back-end infrastructure scanned for known security vulnerabilities at least monthly
cloud.google.comData Isolation
Customer logs stored within tenant project of customer's Google Cloud project, isolated from other customer log streams
cloud.google.com// Products & data scope
data: User-owned reports; personal or shared workspace; covered by Google Privacy Policy for free accounts
No-cost tier with unlimited reports and access to 500+ data connectors. Suitable for individual analysts and small teams.
data: Team workspaces and organization-owned reports; covered by Google Cloud Privacy Policy; supports admin controls and governance
Paid tier (~$5–10 per user per month) adding team collaboration, automated report delivery, Google support, and advanced admin controls. Includes sandbox environment and granular permissions.
// What to watch
- IDENTITY DISTINCTION: Looker Studio (free/Pro visualization tool) and Looker (premium BI platform) are separate products with different compliance scopes. Search results sometimes conflate the two; Looker BI has explicit SOC 2 Type 1/2, but Looker Studio does not.
- SOC 2 ABSENCE: Looker Studio documentation does not publicly claim SOC 2 Type 1 or Type 2 certification. Upstream Google Cloud services may have SOC 2, but the Looker Studio product specifically does not advertise this; marked held=false.
- HIPAA CLARIFICATION: Looker Studio supports HIPAA compliance via BAA, but this is not HIPAA certification of the product. Customers remain responsible for configuration and compliance; Google provides the tools and agreement.
- NDA-GATED CERTS: Google states that full compliance documentation for Looker products is available upon request for customers/prospects under NDA, so a complete public cert list may not exist.
// At a glance
Pricing model
Freemium: Looker Studio (free) + Looker Studio Pro (paid SaaS, per-user/month)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Google LLC (Google Cloud)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
cloud.google.com