Google Workspace Licences

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud
Service constraints: Need to access through a web browser
System requirements: Internet Connectivity with a modern web browser

User support

Email or online ticketing support: Yes, at extra cost
Support response times: P1: 30 mins, P2: 1 hour, P3-P4 tickets: 4 hours
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 24 hours, 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Google provides a single level of support for Google Workspace in line with other enterprise service providers, the terms of support can be found here: https://workspace.google.com/terms/tssg.html

Enhanced support offerings from Ancoris are also available - please see our related services in the "Support" section - "Google Google Workspace Support Services". These services offer enhanced response, case prioritisation, advice & assistance (and not just "break / fix") on Google Google Workspace features; support on integrating Google Workspace into your existing domain; Account management; regular Service Reviews, end user training (via our integrated e-learning tool) and free consultancy on your Google Workspace implementation
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Google provides a proven business transformation framework based on highly regarded research in accredited universities. An online Getting Started learning path is described at https://workspace.google.com/setup/

Enhanced training services are also available from Ancoris - please see our related services in the "Support" section - "Google Google Workspace and Chrome training and Change Management Services", and "Cloud Skills Academy - Google Workspace E-learning and e-Support". These services provide a range of onsite and online training and user documentation

Ancoris also provide Google Workspace migration and deployment services to ensure a smooth implementation for all your users - please see our related service in the "Support" section - "Google Google Workspace and chrome - Migration and Deployment Services". This service provides for a fully managed deployment project covering all aspects of project governance, technical activity needed and user change management required.
Service documentation: Yes
Documentation formats: HTML
End-of-contract data extraction: If your organization decides to leave Google Workspace, your users can take their Google Workspace data with them. They can export emails, contacts, calendars, videos, and more. Then, they can import the data to your new provider. More information can be found here: https://support.google.com/a/answer/100458?hl=en#all
End-of-contract process: Access to the Google Workspace instance will be terminated and data will be removed from all Google systems within 180 business days

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: Yes
Compatible operating systems: Android

IOS

Linux or Unix

MacOS

Windows

Windows Phone

Other
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Custom mobile applications are available both for iOS and Android which provide a bespoke user experience tailored to the operating system in question. For other mobile operating systems, web browser support is included which provides an equivalent experience to the desktop environment.
Service interface: No
User support accessibility: None or don’t know
API: Yes
What users can and can't do using the API: The scope of capabilities exposed via API to Google Workspace users is very broad and encompasses most major use cases. Google Workspace API's are grouped into API's and SDK's that can be found here: https://developers.google.com/google-apps/
API documentation: Yes
API documentation formats: HTML
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: Google Apps Script is a JavaScript cloud scripting language that provides easy ways to automate tasks across Google products

Scaling

Independence of resources: Google Workspace is powered by a massively scaleable infrastructure which already services more than 1 Billion users. The addition of any practicable number of users has a very low impact

Analytics

Service usage metrics: Yes
Metrics types: The Account activity report page gives access to all data from the User account status, Admin status, and 2-Step Verification enrollment reports. It also shows details of Google Drive and Gmail usage. Further information can be found here: https://support.google.com/a/answer/4580176?hl=en
Reporting types: API access

Resellers

Supplier type: Reseller providing extra support
Organisation whose services are being resold: Google

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: In-house
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: Data is encrypted at rest using AES encryption, data sharding and key rotation. Physical access control is also compliant with SSAE-16
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation
Equipment disposal approach: In-house destruction process

Data importing and exporting

Data export approach: Most tools include a 'Save as' function that allows the export of data in industry standard formats. In addition, each user can download all the data they need from their Google Workspace account (including emails, calendars, contacts, documents, bookmarks, and more) to one place at the same time. Users can choose which Google products to archive. For example, they can choose to download their emails and documents, but not their bookmarks or photos. Only the user can access their archive and import it into a new service.
Data export formats: CSV

ODF
Data import formats: CSV

ODF

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: Contractually Google's Service Level is guaranteed to 99.9% availability for any calendar month and backed with service credits. Definitions and service credits are described at https://workspace.google.com/intl/en-GB/terms/sla.html.
Approach to resilience: All data is redundantly stored across a minimum of 3 data centers
Outage reporting: Google provides customer alerts and a public uptime dashboard here: https://www.google.com/appsstatus#hl=en-GB&v=status. The dashboard advises across the Google Workspace services on degradation or downtime.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password
Access restrictions in management interfaces and support channels: Depending on administrator preference, users can be signed in via a federated identity service, including AD or use Google Workspace as their identity backend. 2 Factor authentication is supported and can be enforced.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: Between 1 month and 6 months
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: British Assessment Bureau
ISO/IEC 27001 accreditation date: 26/01/2024
What the ISO/IEC 27001 doesn’t cover: Any service not listed on the ISO certificate is not covered.
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: ISO 27017, ISO 27018, SSAE16 / ISAE 3402 Type II, FedRAMP, HIPAA

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: Google maintains security and patching of the host OS environments.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Google have long enjoyed a close relationship with the security research community. To honor all the cutting-edge external contributions that help Google keep users safe, Google maintain a Vulnerability Reward Program for Google-owned web properties, running continuously since November 2010. More information can be found here: https://www.google.com/about/appsecurity/reward-program/
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Within Google, members of the information security team review security plans for all networks, systems and services. They provide project-specific consulting services to Google’s product and engineering teams. They monitor for suspicious activity on Google’s networks, address information security threats, perform routine security evaluations and audits, and engage outside experts to conduct regular security assessments. We specifically built a full-time team, known as Project Zero, that aims to prevent targeted attacks by reporting bugs to software vendors and filing them in an external database.
Incident management type: Supplier-defined controls
Incident management approach: Security events that affect confidentiality, integrity, or availability of systems or data. The security team logs, prioritizes it according to severity. Events that directly impact customers are assigned highest priority. This process specifies courses of action, procedures for notification, escalation, mitigation, and documentation. Security incident management is structured around the NIST guidance on handling incidents (NISTSP 800–61). Key staff are trained in forensics and handling evidence in preparation for an event, including use of third-party and proprietary tools. Testing of response plans are performed for key areas, e.g.systems that store sensitive customer information. The team is available 24/7 to employees.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change
Equal opportunity

Fighting climate change

We help organisations reduce their carbon footprint by migrating to the cloud. Depending on where you run your systems today, you can reduce up to 80% of your carbon emissions by moving to the Cloud. In fact, we have created a service called GreenLab, which helps organisations discover their current infrastructure, map out their footprint and build a business case which adds sustainability to the migration plan. This is one of the reasons why we partner with Google Cloud, which is widely recognised as the "cleanest cloud". In 2007, Google was the first major company to commit to and achieve carbon neutrality. Since 2017 Google matched 100% of electricity consumption to neutralize all of their operational emissions since their founding. And are aiming higher - to run on carbon-free energy, 24/7, at all of their data centers by 2030.

Equal opportunity

Ancoris is proud to be an equal opportunities employer. We do not discriminate on the basis of race, colour, religion, marital status, age, national origin, physical or mental disability, medical condition, pregnancy, gender, sexual orientation, gender identity, veteran status, or any other applicable legally protected characteristics. But we go beyond that. For example, we partner with Generation, a charity which helps candidates from all different backgrounds to get into technology through training and subsequent placement with tech companies. We continuously work on improving our recruitment processes and employer value proposition to ensure we are able to both attract and retain the most diverse pool of talent. We are also committed to promoting talent from within, which enables our diverse employee base to continually develop and rise to the top of the organisation.

Pricing

Price: £0 to £357.60 a user a year
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: The free version is functionally identical to the paid version of Google Workspace but is only available for 30 days through an online registration and not supplied under G-Cloud terms and conditions.
Link to free trial: https://workspace.google.com/signup/basic/welcome

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Google Workspace Licences

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents