Templates
Google Workspace policy and checklist templates
Six copy-ready documents written against the actual Google Workspace admin console rather than a generic platform, each naming the console path that enforces the clause. Free to adopt and adapt commercially, with no attribution required and no email address needed.
Most policy templates in circulation were written for a network with a domain controller and endpoints you can unplug. These are written for a tenant where the data sits in Google's datacentres and access arrives through an OAuth token.
Every template is plain text on the page, so you can read it before you use it. Nothing here is gated behind a form.
Pages in this section
- Incident response plan templateFree incident response plan template for Google Workspace: account compromise, data exfiltration, invoice fraud and ransomware, with the admin console steps.Scenarios covered: Account compromise, data exfiltration, BEC, ransomware on synced files
- Information security policy templateA free information security policy template mapped to real Google Workspace controls: access, authentication, sharing, devices, retention and supplier review.Policy statements: 9, each mapped to a Workspace control
- Acceptable use policy templateA free acceptable use policy template covering Gmail, Drive sharing, generative AI and personal devices, written for organisations running on Google Workspace.Areas covered: 7: accounts, mail, files, AI, devices, personal use, monitoring
- Employee offboarding checklistA free employee offboarding checklist covering the IT steps in order: revoke tokens, transfer Drive and calendar, handle groups, hold in Vault, then archive.Phases: 4: revoke, transfer, record, close
- IT onboarding checklist templateFree IT onboarding checklist for Google Workspace: account creation, group access, device enrolment, 2-step verification and a week-one access review.Windows: 3: pre-start, day one, end of week one
- Google Workspace disaster recovery plan templateFree, copy-ready Google Workspace disaster recovery plan template: RPO and RTO statements, the 4 loss scenarios Google's retention misses, plus a restore test.Objectives defined: Recovery point and recovery time, per data class
What this doesn't cover
- These are templates, not legal, regulatory or certification advice; adopting one does not make an organisation compliant with any framework.
- Console paths and retention windows are Google's values as at each page's last-checked date and change between releases.
- Bracketed placeholders represent decisions only your organisation can make, particularly retention periods and notification deadlines.
Questions we get asked
- Are these templates really free?
- Yes. Copy, adapt and adopt them internally or for clients with no attribution required and no email address requested. A link back is welcome but is not a condition of use.
- Why write templates specifically for Google Workspace?
- Generic templates tell you to isolate the affected host, which is meaningless when the affected host is a browser session in another country. Naming the admin console path makes each clause verifiable.
Not sure which of these you need?
Send us the shape of your estate — seat count, current platform, and the deadline you are working to — and we will tell you which of these pages applies and what it costs.