// Trust & Security Report
Google LLC
Socratic was a standalone AI homework-help app (iOS/Android, socratic.org) acquired by Google in 2018. Google discontinued it in October 2024 and folded its functionality into Google Lens's 'Homework' feature. socratic.org now HTTP 302-redirects to lens.google/#homework; there is no independent Socratic product, brand, or trust page anymore.
Certifications held
1
Maturity
Enterprise
Trains on your data
Yes
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on business.safety.google“"we are continually evolving our practices, including Data Protection Impact Assessments, to meet worldwide changing requirements including those in the GDPR around Privacy by Design and Privacy by Default." This is Google's company-wide posture (not a certification), applied globally including to this consumer feature via the general Google Privacy Policy.”
> Show 6 unconfirmed / not-held certifications
source: business.safety.googleGoogle's compliance page scopes its SOC 2/SOC 3 reports to 'Google Cloud Platform and Google Workspace' only; Google Lens (the consumer feature Socratic now redirects into) is not listed as in-scope. This is the parent company's enterprise-cloud certification, not a certification of this consumer product.
source: business.safety.googleCertification scope is stated as 'Google Cloud Platform, Google Workspace and Google Ads' -- consumer products like Google Lens/Socratic are not named as in scope.
source: business.safety.googleScoped to 'Google Cloud Platform products and Google Workspace' only; not extended to consumer Search/Lens surfaces.
source: business.safety.googleScoped to 'Google Cloud Platform and Google Workspace'; no evidence it covers the consumer Google Lens/Socratic homework feature.
source: cloud.google.comPublic reporting on Google's ISO/IEC 42001 certification names 'Google Cloud Platform, Google Workspace, and Gemini (App)' as certified; no vendor-domain page names Google Lens's homework-help AI feature (the successor to Socratic) as within that certification's scope.
source: support.google.comGoogle's Workspace HIPAA 'Included Functionality' (covered by BAA) lists services such as Gmail, Drive, and Meet; Google Lens is not listed as included functionality, so it should not be used with PHI.
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Not offered
Data region
No product-specific data residency controls documented for the consumer Google Lens/Socratic feature; subject to Google's general global infrastructure and international data transfer mechanisms described in the Google Privacy Policy.
There is no Socratic-specific privacy policy; the product now redirects into Google Lens, governed by the general Google Privacy Policy. Google's 'Search Services History' setting (which covers images uploaded to Lens, i.e. the exact mechanism now used for homework help) is default-on for most signed-in users: saved media 'may be used to develop, train, fine-tune, and improve' Google's AI models. Per Google Support: 'When Search Services History is off, your future activity won't be used to train Google's generative AI models, unless you provide feedback' and 'data is disconnected from your Google Account before it is used to train our AI models,' with retention of up to 4 years post-disconnection. Google Accounts obtained through an educational institution (i.e. many Socratic's original student users) are explicitly exempted: 'If you got your Google Account through your educational institution, Google does not use your Search Services History data to train generative AI models.' No Google Cloud-style DPA is offered for this free consumer feature (DPAs apply to Workspace/Cloud commercial agreements, not consumer accounts).
// Security controls
Encryption in transit
Google states data is encrypted while in transit as part of its general account security practices (applies platform-wide, not a Socratic-specific disclosure).
policies.google.comEnterprise compliance certifications
Held by Google Cloud Platform, Google Workspace, and Google Ads only; not extended in vendor documentation to the consumer Google Lens/Socratic homework feature.
business.safety.googleAccount security controls
Consumer Google Account protections apply (Safe Browsing, Security Checkup, 2-Step Verification) since Socratic/Lens usage runs through a standard Google Account.
policies.google.com// Products & data scope
data: Discontinued October 2024. socratic.org and the former iOS/Android apps no longer operate independently.
socratic.org now returns an HTTP 302 redirect to https://lens.google/#homework.
data: Camera/photo uploads (the same content type Socratic used to process) submitted for step-by-step homework answers across math, science, and other subjects.
Free consumer feature governed by the general Google Privacy Policy and Terms of Service, not by Google Cloud's enterprise compliance program. Image uploads are eligible for AI-training use by default unless the user disables Search Services History; educational Google Accounts are exempt from AI-training use of this data.
// What to watch
- Identity/lifecycle risk: 'Socratic by Google' is a discontinued product. socratic.org 302-redirects to lens.google/#homework, and Google's own reporting confirms Socratic was shut down in October 2024 with its functionality merged into Google Lens. Listing it as an active standalone tool without this context would mislead users.
- Host-vs-product cert scope: Google Cloud/Workspace/Ads hold SOC 2, ISO 27001, ISO 27017/18/27701, and ISO 42001, but Google's own compliance page scopes all of these to those enterprise products specifically -- none is documented as covering the free consumer Google Lens/Socratic homework feature. Do not display Google's enterprise-cloud certifications against this consumer-facing listing.
- AI training default-on: images/content submitted for homework help can be used to train Google's generative AI models by default (Search Services History), with opt-out available; only educational Google Accounts are automatically exempted.
- No product-specific trust center, DPA, or security page exists for Socratic/this Lens feature; all evidence is drawn from Google's company-wide policies.
// At a glance
Pricing model
Free (consumer feature bundled into the Google app / Google Lens; no separate Socratic pricing exists anymore)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Google LLC's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-06-27. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
policies.google.com