Google infrastructure is designed to ensure that information is secure throughout its entire lifecycle. Security within Google infrastructure encompasses several layers and concerns the deployment of services, the storage of data, inter-process and external communications, up to operational concerns.
Physical Layer
At the physical layer, security is ensured by:
Service deployment
At the service level, Google does not assume any trust between services running on the same infrastructure. This has a number of important consequences for service identification, authorization, and data privacy and integrity, including the following:
Data storage
Google uses encryption both at the application and the drive level. Indeed, before being stored to disk, data is encrypted using a central key management service that provides audit logs, automatic key rotation, etc.
