Google Workspace admins can now automatically apply client-side encryption to Docs, Sheets, Slides and Drive files. The feature uses Policy-Based Enforcement in the Rules Engine. Encryption applies in place and keeps the original file URL. It covers my Drive and shared drives. Supported file types include Google Docs, Sheets, Slides, Office files, PDFs and images. Users see a notification when opening an encrypted file. Admins can monitor activity via the security investigation tool. Alerts appear if the external Key Access Control List Service is unreachable. The feature is in beta and requires a form submission to access. It is OFF by default and must be configured by admins. Eligible customers need Enterprise Plus with Assured Controls or Assured Controls Plus.
What changed
End users had to manually create encrypted copies and delete unencrypted originals.
What it unlocks
Admins can now enforce client-side encryption on sensitive files automatically via policy rules.
What you need to act on it
- Assured Controls or Assured Controls Plus license
- enrollment in Policy-Based Enforcement beta
- admin configuration in Admin console
Sources