Google Workspace Changes

Administrators can automatically apply client-side encryption (CSE) to confidential Docs, Sheets, Slides, and Drive files using Policy-Based Enforcement, now available in beta.

Google Workspace administrators can automatically enforce client-side encryption (CSE) on sensitive files across their organization using Policy-Based Enforcement, now available in beta. Integrated with the Google Workspace Rules Engine, the feature applies encryption in place while preserving original file URLs across My Drive and shared drives, supporting Google Docs, Sheets, Slides, Microsoft Office files, PDFs, and images. End users receive in-product contextual notifications when opening encrypted files, and administrators can monitor encryption activity in the security investigation tool with alert center notifications for external Key Access Control List Service (KACLS) issues. The feature requires Assured Controls or Assured Controls Plus licenses and beta enrollment, and is off by default.