// Trust & Security Report
Looker Studio
by Google LLC (Google Cloud)
Looker Studio is Google's free data visualization and reporting platform (formerly Google Data Studio), with a premium paid tier (Looker Studio Pro). It enables non-technical users to create interactive dashboards and reports by connecting to various data sources via built-in and partner connectors.
Certifications held
5
Maturity
Enterprise
Trains on your data
No
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on cloud.google.com“If you're subject to GDPR, you must complete all required fields within Data Studio > User Settings > Account & Privacy to comply with GDPR.”
Verify on cloud.google.com“traffic. Learn more Hide Back to offerings Current GLOBAL | ALL INDUSTRIES ISO/IEC 27017 The International Organization for Standardization (ISO) is an independent, non-governmental organization with an”
Verify on cloud.google.com“traffic. Learn more Hide Back to offerings Current GLOBAL | ALL INDUSTRIES ISO/IEC 27018 The International Organization for Standardization (ISO) is an independent, non-governmental international organization”
> Show 2 unconfirmed / not-held certifications
source: cloud.google.comNo explicit public evidence of Looker Studio holding SOC 2 Type 1 or Type 2 certification. The premium 'Looker' BI product has SOC 2 Type 1 (GCP) and Type 2 (AWS), but this is distinct from Looker Studio. Data Studio documentation states it 'supports' SOC 2 compliance standards, meaning customers can achieve SOC 2 compliance using it, but Google has not published its own SOC 2 audit report for Looker Studio.
source: cloud.google.comLooker Studio supports HIPAA compliance within the scope of the Google Cloud Platform Business Associate Agreement (BAA). Customers must execute the BAA before using Looker Studio with PHI, and responsibility for ensuring HIPAA compliance rests with the customer. This is not a HIPAA certification held by Google, but rather support for customer HIPAA compliance.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
Global (customer data stored in Google Cloud regions; EU data can be stored in EU regions per GDPR requirements)
Google does not use customer data to train its AI/LLM models without explicit permission. Data processed through Looker Studio is not used for training Google's foundation models. This policy is consistent across Google Cloud products.
// Security controls
Encryption in Transit
HTTPS with TLS encryption for all data transmitted between client and server
cloud.google.comMulti-Factor Authentication (MFA)
MFA supported and configurable via Google Workspace/Cloud Identity, with support for app-based authenticators (Google Authenticator, Authy)
cloud.google.comAudit Logging
Comprehensive audit logs tracking user activity, logins, report generation, data access, and administrative actions; available via Admin console
cloud.google.comAccess Controls
Row-level security (RLS), granular sharing controls, file permission management, and integration with Google Workspace/Cloud Identity for centralized access control
cloud.google.comVulnerability Scanning
Front-end application and back-end infrastructure scanned for known security vulnerabilities at least monthly
cloud.google.comData Isolation
Customer logs stored within tenant project of customer's Google Cloud project, isolated from other customer log streams
cloud.google.com// Products & data scope
Data it handles: User-owned reports; personal or shared workspace; covered by Google Privacy Policy for free accounts
No-cost tier with unlimited reports and access to 500+ data connectors. Suitable for individual analysts and small teams.
Data it handles: Team workspaces and organization-owned reports; covered by Google Cloud Privacy Policy; supports admin controls and governance
Paid tier (~$5 to 10 per user per month) adding team collaboration, automated report delivery, Google support, and advanced admin controls. Includes sandbox environment and granular permissions.
// What to watch
- Looker Studio (free/Pro visualization tool) and Looker (premium BI platform) are separate products with different compliance scopes; Looker BI has SOC 2 Type 1/2, but Looker Studio does not.
- Looker Studio documentation does not publicly claim SOC 2 Type 1 or Type 2 certification. Upstream Google Cloud services may have SOC 2, but the Looker Studio product specifically does not advertise this.
- Looker Studio supports HIPAA compliance via BAA, but this is not HIPAA certification of the product. Customers remain responsible for configuration and compliance; Google provides the tools and agreement.
- Full compliance documentation for Looker products is available upon request for customers/prospects under NDA, so a complete public cert list may not exist.
// At a glance
Pricing model
Freemium: Looker Studio (free) + Looker Studio Pro (paid SaaS, per-user/month)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Google LLC (Google Cloud)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
cloud.google.com// Trust reports for comparable tools
Other tools in the same category, each with its own sourced report.