Google Cloud Platform
Weighted across nine legal categories. Lower is worse.
Executive summary
This is the contract that governs businesses using Google Cloud, Google Workspace, and related services. It is clearer and more balanced than most tech agreements: you keep full ownership of your data and applications, Google promises to process your data only under its data processing addendum, and both sides indemnify each other. The weak spots are money and change control. Google can change prices for core cloud services at any time, your payment obligation is called non-cancellable, billing refunds come only as service credits, and Google can update the agreement by posting changes online, with your continued use counting as acceptance. Disputes go to real courts in Santa Clara County, California under California law, with no forced arbitration and no class action waiver.
Category breakdown
Acceptance of Terms & Scope
Contract formation and service boundaries
You accept by clicking, which is a clear clickwrap process, and the agreement plainly defines which services it covers and which it does not. The main drawback is layering: the AUP, data addendum, service terms, SLAs, and support guidelines all live at separate URLs that are incorporated by reference and can change, so you never see the whole deal in one place.
Key findings
- Clear click-to-accept formation with an explicit Effective Date
- The person accepting must confirm they have authority to bind the business
- Scope is well defined per service family (GCP, Workspace, SecOps, Looker, Cloud Identity) with stated exclusions like Starter Tier
- Heavy incorporation by reference of URL Terms that Google can update, and Google may even swap in updated URLs
- Translations exist but the English text always governs
- Regional modifications at a separate URL can override parts of the agreement based on your billing address
Evidence from the document
This Agreement is effective when Customer clicks to accept or otherwise agrees to it (the "Effective Date").
The URL Terms are incorporated by reference into this Agreement. After the Effective Date, Google may provide an updated URL in place of any URL in this Agreement.
If this Agreement is translated into any language other than English, and there is a discrepancy between the English text and the translated text, the English text will govern
Recommendations
- Before accepting, open and save copies of every incorporated URL document (AUP, data addendum, service terms, SLAs)
- Confirm whether you fall under a reseller, offline contract, or exemption category, since those change which terms apply
- Check the regional modifications page for your billing country, since it overrides the main agreement
User Accounts
Registration, suspension, and termination
Suspension and termination rules are more structured than most: AUP violations get notice and a 24 hour cure window, breach termination requires 30 days notice and a chance to cure, and inactivity termination requires 30 days notice. But Google can suspend immediately in broad security or legal situations, can terminate core cloud services for pure convenience on 30 days notice, and on termination all access ends including access to your data, with no data export window spelled out in this document.
Key findings
- AUP violations come with notice and a 24 hour window to fix before suspension
- Either party can terminate for material breach after a 30 day cure period, which is mutual and fair
- Google may terminate GCP services for its own convenience with only 30 days notice
- Immediate suspension allowed for security, suspected unauthorized access, legal compliance, or restriction breaches
- If domain verification fails, Google may delete the account without notice
- On termination all rights and access end, including access to Customer Data, and no retrieval period is defined here
Evidence from the document
If Customer fails to correct the violation within 24 hours of Google's request, then Google may Suspend all or part of Customer's use of the Services until the violation is corrected.
Google may terminate this Agreement or any applicable Order Form for its convenience at any time with 30 days' prior written notice to Customer.
all rights and access to the Services (or in the case of termination of an Order Form, the applicable Services) will terminate (including access to Customer Data, if applicable)
then Google will have no obligation to provide Customer with GWS Services or Cloud Identity Services and may delete the Account without notice
Recommendations
- Keep independent, regularly tested backups of everything stored in Google Cloud, since access to your data ends at termination
- Keep your Notification Email Address current, because notices count as received when sent to it
- If you run a business on GCP, plan for the possibility that Google exits the relationship with 30 days notice
- For Workspace annual plans, calendar the 15 day non-renewal notice deadline
Intellectual Property & UGC
Content ownership and licensing
This is one of the strongest sections for you. The agreement states outright that you retain all intellectual property rights in your data and your applications, and Google commits to processing your data only under the data processing addendum. The minor negatives are the standard unrestricted license to feedback you submit and Google's right to use your name and brand in its promotional materials.
Key findings
- You keep all IP rights in Customer Data and Customer Applications
- No broad content license grant to Google beyond data processing needed to run the service
- Feedback you provide can be used by Google without restriction or compensation
- Google may use your company name and brand features in promotional materials without separate approval
- Google indemnifies you if the services infringe a third party's IP rights
- DMCA repeat infringer policy is stated
Evidence from the document
Customer retains all Intellectual Property Rights in Customer Data and Customer Applications, and Google retains all Intellectual Property Rights in the Services and Software.
If Customer provides Feedback, then Google and its Affiliates may use that Feedback without restriction and without obligation to Customer.
Google may use Customer's name and Brand Features in online or offline promotional materials of the Services.
Recommendations
- Do not submit commercially valuable ideas through feedback channels, since Google can use them freely
- If you do not want your company name used in Google marketing, negotiate that point or raise it with your account team
- Document your ownership of applications and data you host, which this agreement supports
Data Privacy
Data collection, usage, and protection
The agreement contains strong purpose limitation: Google promises to process your data only under the Cloud Data Processing Addendum and for no other purpose, and it cannot update that addendum in ways that materially reduce security or expand its processing rights. However, the actual privacy detail lives in the addendum at a separate URL, and Google may log your generative AI prompts when its automated tools suspect abuse.
Key findings
- Explicit commitment to process Customer Data only per the Cloud Data Processing Addendum
- Updates to the data addendum cannot materially reduce security or expand Google's processing of personal data
- Customer Data is treated as your Confidential Information
- Google will try to notify you before disclosing your confidential information under legal process, with carve-outs
- Generative AI abuse detection may log your prompts for violation review
- You carry responsibility for obtaining all end user consents and notices
Evidence from the document
Google will only access, use, and otherwise process Customer Data in accordance with the Cloud Data Processing Addendum and will not access, use, or process Customer Data for any other purpose.
does not result in a material reduction of the security of the Services
Google may log Customer prompts solely for the purpose of reviewing and determining whether a violation has occurred.
Customer is responsible for any consents and notices required to permit (a) Customer's use and receipt of the Services and (b) Google's accessing, storing, and processing of data provided by Customer
Recommendations
- Read the Cloud Data Processing Addendum itself, since the real privacy commitments live there, not in this document
- If you use generative AI services, know that flagged prompts can be logged and reviewed by Google
- Make sure your own privacy notices cover Google's processing, since that duty sits with you
- Ask about data residency and transfer safeguards for your region, which this document does not address
Payment & Subscriptions
Billing and subscription management
Payment terms lean heavily toward Google. Your obligation to pay is described as non-cancellable, Google can change fees for core cloud services at any time with advance notice promised only for Workspace, Looker, and Cloud Identity, refunds for Google's own billing mistakes come only as service credits, and termination brings no refund of fees. Late payment triggers 1.5 percent monthly interest, your payment of Google's collection costs including attorney fees, and possible suspension.
Key findings
- Fees are stated as non-cancellable unless the law requires otherwise
- Google may change GCP fees at any time; only Workspace, Looker, and Cloud Identity get 30 days notice, applied at renewal
- Billing error refunds are issued only as service credits, never as money back
- Late payments accrue 1.5 percent monthly interest plus Google's collection expenses including attorney fees
- Late payment can lead to suspension of the services you depend on
- No refunds on termination or non-renewal unless the law requires it
- Google may require prepaid credits from customers it judges to be a payment risk, based on its own criteria
- Workspace Flexible Plan renews monthly and can be canceled in the Admin Console; annual plans need 15 days non-renewal notice
Evidence from the document
Unless required by law, Customer's obligation to pay all Fees is non-cancellable.
Google may change the Fees at any time unless otherwise expressly agreed in an addendum or Order Form.
Refunds given by Google for billing inaccuracies under this Section will only be in the form of credit for the Services.
Customer will be responsible for all reasonable expenses (including attorneys' fees) incurred by Google in collecting such delinquent amounts.
termination or non-renewal under any section of this Agreement (including the Cloud Data Processing Addendum or any Order Form) will not oblige Google to refund any Fees.
Recommendations
- Set budget alerts and spending caps, since usage-based fees are non-cancellable once incurred
- Dispute any billing error in writing before the payment due date, because disputes raised later lose protection from interest
- If price stability matters, negotiate fixed pricing in an Order Form, since the default lets Google change GCP fees at any time
- Track renewal dates for annual Workspace plans and send non-renewal notice at least 15 days early
Limitation of Liability
Risk allocation and legal protection
The liability section is mutual and more reasonable than most. Both parties exclude indirect and consequential damages, and each side's total liability is capped at the fees you paid in the prior 12 months, which scales with your actual spend rather than a token amount. Important carve-outs keep fraud, indemnification duties, IP infringement, and payment obligations unlimited. The weak points are the full warranty disclaimer and the $5,000 cap on anything Google provides free of charge.
Key findings
- Liability limitations apply to both parties equally, not just to Google
- Cap equals fees paid in the 12 months before the event, a meaningful amount for paying customers
- Free services carry only a $5,000 liability cap
- Fraud, indemnification obligations, IP infringement, and payment duties are excluded from all caps
- All warranties are disclaimed to the fullest extent permitted, including uptime and fitness for purpose, leaving SLAs as the main service promise
- Consequential damages such as lost profits and lost revenue are excluded for both sides
Evidence from the document
is limited to the Fees Customer paid for such Services during the 12 month period before the event giving rise to Liability, except Google’s total aggregate Liability for damages arising out of or related to Services or Software provided free of charge is limited to $5,000.
neither party will have any Liability arising out of or relating to this Agreement for any (a) indirect, consequential, special, incidental, or punitive damages or (b) lost revenues, profits, savings, or goodwill.
Nothing in this Agreement excludes or limits either party's Liability for: (a) its fraud or fraudulent misrepresentation
Google does not make and expressly disclaims to the fullest extent permitted by applicable law (a) any warranties of any kind, whether express, implied, statutory, or otherwise
Recommendations
- Understand that if an outage costs you lost revenue, that category of damage is excluded entirely
- Check the SLA documents, since they are the only real performance commitment after the warranty disclaimer
- If your potential losses far exceed 12 months of fees, buy cyber or business interruption insurance rather than relying on this contract
- Do not run critical workloads on free tier services, where liability is capped at $5,000
Indemnification
Legal responsibility allocation
Unusually for a big tech contract, indemnification runs both ways. Google defends and indemnifies you against third party claims that its services infringe intellectual property rights, while you indemnify Google for claims arising from your applications, data, or misuse of the services. Your obligation is bounded to specific triggers rather than any use of the service, and standard procedural protections apply to both sides.
Key findings
- Google indemnifies you for third party IP infringement claims against the services
- Your indemnity is limited to your applications, projects, data, brand features, and AUP or restrictions breaches, not all use
- Both indemnities carry the same notice, control, and settlement consent conditions
- Settlements requiring you to admit liability or pay money need your prior written consent
- Google's IP indemnity does not cover free services
- If the services are found infringing, Google must fix, replace, or refund unused prepaid fees
Evidence from the document
Google will defend Customer and its Affiliates using the Services under Customer’s Account and indemnify them against Indemnified Liabilities in any Third-Party Legal Proceeding
Customer will defend Google and its Affiliates providing the Services and indemnify them against Indemnified Liabilities in any Third-Party Legal Proceeding to the extent arising from (a) any Customer Application, Project, Customer Data, or Customer Brand Features
any settlement requiring the indemnified party to admit liability, pay money, or take (or refrain from taking) any action, will require the indemnified party's prior written consent
Recommendations
- Notify Google promptly of any third party claim, since delay can reduce your indemnity protection
- Remember free tier services carry no IP indemnity from Google
- Vet the content and licensing of your own applications carefully, since claims about them fall on you
Modification of Terms
How agreements can be changed
Google can update this agreement and the incorporated URL Terms unilaterally by posting changes online. Material GCP updates take effect 30 days after posting, but updates tied to new functionality or legal compliance are effective immediately, and your continued use counts as consent. On the positive side, Workspace and similar subscription changes wait until your term renews, data addendum changes are tightly restricted, and Google promises 12 months notice before discontinuing a service.
Key findings
- Updates are made by posting to a website, with no commitment to email you about agreement changes
- Continued use of GCP services after a material update counts as acceptance
- Updates for new functionality or legal compliance take effect immediately with no notice period
- For Workspace, SecOps, Looker, and Cloud Identity, material updates apply only when your order term renews, which is stronger protection
- Cloud Data Processing Addendum changes cannot reduce security or expand data processing
- 12 month advance notice before discontinuing a service or breaking an API, a strong commitment
- Your remedy for unwanted changes is to stop using the services and terminate for convenience
Evidence from the document
Customer's continued use of the GCP Services or TSS after a material update will constitute Customer's consent to such update.
unless otherwise noted by Google, material updates to this Agreement will become effective 30 days after they are posted.
to the extent any updates apply to new functionality or are required to comply with applicable law, they will be effective immediately.
Google will notify Customer at least 12 months before: (i) discontinuing any Service (or associated material functionality)
Recommendations
- Periodically check cloud.google.com/terms and the URL Terms pages, since posting is the only guaranteed notice
- Archive dated copies of the terms you accepted so you can prove what changed
- If a material update is unacceptable, act within the 30 day window, because continued use locks in your consent
- Use the 12 month discontinuation notice to plan migrations off deprecated services
Governing Law & Disputes
Jurisdiction and conflict resolution
Disputes are governed by California law and must be litigated in the state or federal courts of Santa Clara County, California. There is no forced arbitration, no class action waiver, and no jury trial waiver, which preserves real court access and is better than most technology contracts. The cost is venue: if you are far from California, litigating there is expensive, and one-sided fee shifting applies when Google collects unpaid bills.
Key findings
- No mandatory arbitration clause and no class action waiver anywhere in the agreement
- Exclusive venue is Santa Clara County, California, which is convenient for Google and costly for distant customers
- California law governs for most customers, with special silence for US state and local government entities
- You must comply with US export control and anti-bribery laws, and violations allow immediate termination
- Google recovers attorney fees when collecting delinquent payments, but there is no matching fee award for you
- Both parties keep the right to seek equitable relief
Evidence from the document
ALL CLAIMS ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE SERVICES WILL BE GOVERNED BY CALIFORNIA LAW, EXCLUDING THAT STATE'S CONFLICT OF LAWS RULES, AND WILL BE LITIGATED EXCLUSIVELY IN THE FEDERAL OR STATE COURTS OF SANTA CLARA COUNTY, CALIFORNIA
Google may terminate this Agreement immediately on written notice if Google reasonably believes that (a) continued provision of any Service used by Customer would violate applicable law(s) or (b) Customer has violated or caused Google to violate any Anti-Bribery Laws or Export Control Laws.
Nothing in this Agreement will limit either party's ability to seek equitable relief.
Recommendations
- Budget for California litigation costs when weighing any dispute, since venue is fixed in Santa Clara County
- Raise billing disputes through the good faith dispute process first, which is far cheaper than court
- If you operate internationally, review the export control restrictions carefully, since violations end the contract immediately
Ex-TerCo provides automated analysis of legal documents for informational purposes. This is not legal advice. Terms can change at any time.