Is Gemini Code Assist safe for work?
Low risk · 19Google · Coding · facts (medium-confidence)
Gemini Code Assist is low-risk for default at-work use (19/100): it trains on your data unless you opt out, and holds SOC 2 Type II.
19
Low risk
Watch out: On Standard and Enterprise, Gemini Code Assist is not trained on without permission, is stateless, and carries SOC 1/2/3 and ISO 27001 with VPC Service Controls. The free Individual tier is different: code and prompts are collected to improve Google products with human review and up to 18-month retention.
Data and compliance facts
- Trains on consumer-tier data
- Opt-out
- Trains on business-tier data
- No
- Training opt-out available
- Yes
- SOC 2 Type II
- Yes
- ISO 27001
- Yes
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- Unverified
- EU data residency
- Unverified
- SSO / SAML
- Unverified
- Data retention
- Standard and Enterprise: stateless, prompts and responses are not stored in Google Cloud. Individuals: disconnected copies retained up to 18 months.
- Safer tier
- Gemini Code Assist Standard or Enterprise (not the free Individual tier)
Why it scores 19 out of 100
- +19Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.