Reference
Google Workspace data regions and what they cover
A Google Workspace data region policy stores covered primary data at rest in 1 of 2 regions, Europe or the United States, and it requires an Enterprise or Education edition. Backups, indexes and data in transit are not confined to the chosen region, which is the distinction auditors ask about.
| Regions | Europe or the United States |
|---|---|
| Edition required | Enterprise or Education editions |
| Covered | Primary data at rest for core services such as Gmail and Drive |
| Not covered | Data in transit, service indexes and some metadata |
| Applies to | Organisational units or groups, not only the whole tenant |
What an auditor is really asking
The question is rarely whether data sits in Europe. It is whether you can evidence which data is covered, which is not, and who signed off the difference. A data region policy answers the first part only.
Stating the policy alongside its documented exclusions is a stronger answer than claiming that everything is in one region, because the second claim does not survive scrutiny.
Where the edition requirement bites
Business editions cannot set a data region. Tenants that promised regional storage in a tender and bought Business Plus discover the gap during the first audit, not at purchase.
Applying the policy at organisational unit level lets you cover the teams that need it without moving the whole tenant to Enterprise, which is often the cheaper honest answer.
What we see that others don't say
The commitments most often broken in tender responses are regional ones made on Business editions, which cannot set a data region policy at all regardless of where the tenant is billed.
What this doesn't cover
- A data region policy is not a data residency guarantee for every byte Google processes.
- We describe the platform capability; contractual and regulatory interpretation is your legal team's call.
Questions we get asked
- Does Business Standard support Google Workspace data regions?
- No. Data region policies require an Enterprise or Education edition. Business editions cannot pin covered data at rest to Europe or the United States regardless of the tenant's billing country.
- Are backups covered by a data region policy?
- No. The policy covers primary data at rest for core services. Backups, service indexes and data in transit fall outside it, which is the distinction to declare rather than gloss over.
How this page is verified
Reviewed by Pearl Lemon Cloud security desk, Workspace security and compliance reviewers. Last checked .
- Scope and edition requirements verified against Google's data regions documentation at the review date.
- Audit question patterns drawn from tender and compliance reviews we have supported.
Sources you can check
Related pages
Answering a data residency question in a tender?
We document exactly which data your policy covers, which it does not, and what edition change would be needed, in language a procurement reviewer accepts.