Certificate

Certificate number: 2016-005b

Certified by EY CertifyPoint since: April 15, 2016

Based on certification examination in conformity with defined requirements in

ISO/IEC 17021-1:2015 and ISO/IEC 27006:2015, the Information Security
Management System as defined and implemented by

Google LLC*
located in Mountain View, California, United States of America is compliant with the
requirements as stated in the standard:

ISO/IEC 27018:2014
Issue date of certificate: April 15, 2016
Re-issue date of certificate: October 31, 2017
Expiration date of certificate: April 14, 2018

EY CertifyPoint will, according to the certification agreement dated February 13,

2015, perform surveillance audits and acknowledge the certificate until the
expiration date noted above.

*The certification is applicable for the assets, services and locations as described in the scoping
section on the back of this certificate, with regard to the specific requirements for information
security as stated in the Statement of Applicability, version 3.1, dated August 18, 2017.

Drs. J. Sehgal RE | Director, EY CertifyPoint

© Copyrights with regard to this document reside with Ernst & Young CertifyPoint B.V., headquartered at Antonio
Vivaldistraat 150, 1083 HP Amsterdam, the Netherlands. All rights reserved.

Page 1 of 5 DIGITAL COPY

 Google LLC

Scope for certificate 2016-004b

The scope of this ISO/IEC 27018:2014 certification is bounded by the following

products and their offerings as listed below, along with the data contained or
collected by those offerings:

Google Cloud Platform

 App Engine  Cloud SDK
 App Engine Flexible Environment  Cloud Security Scanner
 BigQuery  Cloud Shell
 Cloud Bigtable  Cloud Source Repositories
 Cloud Billing API  Cloud Spanner
 Cloud CDN (Content Delivery
 Cloud Speech API
Network)
 Cloud Console  Cloud SQL
 Cloud Data Loss Prevention API  Cloud Storage
 Cloud Dataflow  Cloud Translation API
 Cloud Datalab  Cloud Video Intelligence API
 Cloud Dataproc  Cloud Virtual Network
 Cloud Datastore  Cloud Vision API
 Cloud DNS (Domain Name System)  Cloud VPN
 Cloud Endpoints  Compute Engine
 Cloud Functions  Container Builder
 Cloud IAM (Identity & Access
 Container Engine
Management)
 Cloud Identity-Aware Proxy  Container Registry
 Cloud IoT Core  Debugger
 Cloud Jobs API  Deployment Manager
 Cloud Key Management Service  Error Reporting
 Cloud Launcher  Genomics
 Cloud Load Balancing  Google Service Control
 Cloud Machine Learning Engine  Stackdriver Logging
 Cloud Mobile App  Trace
 Cloud Natural Language API
 Cloud Pub/Sub
 Cloud Resource Manager 
 Cloud Router 

This scope (edition: October 31, 2017) is only valid in connection with certificate 2012-004b

Page 2 of 5 DIGITAL COPY

 Google LLC

Scope for certificate 2016-004b

The following locations are in scope:

Data Centers: Offices:

 Atlanta (1) (GA), United States  Mountain View (CA), United
of America States of America
 Atlanta (2) (GA), United States  Sunnyvale (CA), United States of
of America America
 Changhua, Taiwan  San Francisco (CA), United States
 Council Bluffs (1) (IA), United  Irvine (CA), United States of
States of America America
 Council Bluffs (2) (IA), United  Boulder (CO), United States of
States of America America
 The Dalles (OR), United States  Cambridge (MA), United States of
of America America
 Dublin, Ireland  New York (NY), United States of
 Eemshaven, Groningen, America
Netherlands  Kirkland (WA), United States of
 Ghlin, Hainaut, Belgium America
 Hamina, Finland  Seattle (WA), United States of
 Lenoir (NC), United States of America
America  Sydney, Australia
 Longtan, Taoyuan, Taiwan  Belo Horizonte, Brazil
 Moncks Corner (SC), United  Hyderabad, India
States of America  Bangalore, India
 Pryor Creek (OK), United States  Dublin, Ireland
of America  Tokyo, Japan
 Quilicura, Santiago, Chile  Krakow, Poland
 Wenya, Singapore  Los Angeles (CA), United States
 Koto-ku, Tokyo, Japan of America
 Ashburn (VA), United States of  Shanghai, China
America  Manila, Philippines
 London, United Kingdom  Gurgaon, India
 Frankfurt, Hesse, Germany  San Bruno (CA), United States of
 Sydney, Australia America
 Madison (WI), United States of
America
 Aarhus, Denmark
 Singapore, Singapore
 Tel Aviv, Israël
(Continued on next page)
Offices (continued):

This scope (edition: October 31, 2017) is only valid in connection with certificate 2012-004b

Page 3 of 5 DIGITAL COPY

 Google LLC

Scope for certificate 2016-004b

 Pittsburgh (PA), United States of  Louisville (KY), United States of

America America
 Kitchener, Canada  Surprise (AZ), United States of
 Munich, Germany America
 Palo Alto (CA), United States of  Kuala Lumpur, Malaysia
America  Accra, Ghana
 Chicago (IL), United States of  Moncks Corner (SC), United
America States of America
 Beijing, China  Waltham (MA), United States of
 Paris, France America
 Warsaw, Poland  Copenhagen, Denmark
 Stockholm, Sweden  Addison (TX), United States of
 Austin (TX), United States of America
America  Helsinki, Finland
 Rennes, France  Lagos, Nigerian
 Kampala, Uganda  Pryor Creek (OK), United States
 Austell (GA), United States of of America
America  Birmingham, United Kingdom
 Berlin, Germany  Brussels, Brussels
 Haifa, Israël  Beverly Hills (CA), United States
 Montreal, Canada of America
 Mumbai, India  Bangkok Thailand
 Prague, Czech Republic  Taipei, Taiwan
 St. Louis Park (MN), United  Seoul, South Korea
States of America  Wroclaw, Poland
 Melbourne, Australia  Ann Arbor (MI), United States of
 Zurich, Switzerland America
 London, United Kingdom  San Diego (CA), United States of
 Malaga, Spain America
 Buenos Aires, Brazil  Atlanta (GA), United States of
 Milan, Italy America
 Dubai, United Arab Emirates  Portland (OR), United States of
 Moscow, Russia America
 The Dalles (OR), United States  Sao Paulo, Brazil
of America  Thornton (CO), United States of
 Amsterdam, Netherland America
 Council Bluffs (IA), United  Chapel Hill (NC), United States of
States of America America
 Madrid, Spain  Hamburg, Germany
(Continued on next page)
Offices (continued):

This scope (edition: October 31, 2017) is only valid in connection with certificate 2012-004b

Page 4 of 5 DIGITAL COPY

 Google LLC

Scope for certificate 2016-004b

 Lenoir (NC), United States of  Playa Vista (CA), United States of

America America
 Edmonton, Canada  Washington DC, United States of
 Toronto, Canada America
 Istanbul, Turkey  Bothell (WA), United States of
 San Jose (CA), United States of America
America  Hong Kong, Hong Kong
 Reston (VA), United States of  Nairobi, Kenya
America  Mexico City, Mexico
 Durham (NC), United States of  Miami (FL), United States of
America America
 Goleta (CA), United States of  San Antonio (TX), United States of
America America

The Information Security Management System (ISMS) is centrally managed out of

the Google LLC headquarters in Mountain View, California, United States of
America. The ISMS mentioned in the above scope is restricted as defined in the
Information Security Management System (ISMS) Implementation Manual, version
3.4, signed on October 26, 2017, by the Director, Engineering Compliance.

This scope (edition: October 31, 2017) is only valid in connection with certificate 2012-004b

Page 5 of 5 DIGITAL COPY