In addition to Gmail, Meet, and other Workspace announcements today, Google Docs and Drive will soon get Client-side encryption where “customer data is indecipherable to Google.”.

This will allow customers to directly control encryption keys, while end users are still able to “take advantage of Google’s native web-based collaboration, access content on mobile devices, and share encrypted files externally.” This will work with Google Drive files (Office, PDF, and more file formats), Docs, Sheets, and Slides.

Your partner of choice holds the key to decode encrypted Google Workspace files, and Google cannot access or decipher these files without this key. 

A beta of Client-side encryption in Drive will be available in the “coming weeks” for Google Workspace Enterprise Plus and Google Workspace Education Plus customers

Other announcements today include trust rules for Drive, and Drive labels that integrate with existing data loss prevention tools