# Google Docs privacy rating

Google's browser-based word processor with real-time collaboration, part of Google Workspace alongside Sheets and Slides. Files are stored in Google Drive.

## Summary

Google Docs scores 34 out of 100 (grade F) on the office suites criteria. It meets 2 of 8 criteria: transparency report and tells users about requests. It partly meets independent audit, TLS configuration and security headers. It does not meet open source, no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B.

- Website: https://docs.google.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Web, Android, iOS
- Home page trackers: none found
- Category: [Office suites](https://privacyratings.com/office-suites/)
- Also rated: [Gmail](https://privacyratings.com/email-providers/gmail/) (Email providers), [Gmail app](https://privacyratings.com/email-clients/gmail-app/) (Email clients), [Google Takeout](https://privacyratings.com/email-backup/google-takeout/) (Email backup tools), [Google Chrome](https://privacyratings.com/browsers/google-chrome/) (Browsers), [Google Search](https://privacyratings.com/search-engines/google-search/) (Search engines), [Google Authenticator](https://privacyratings.com/two-factor-authentication/google-authenticator/) (Two-factor authentication), [Google Messages](https://privacyratings.com/messengers/google-messages/) (Messengers), [Google Meet](https://privacyratings.com/video-calls/google-meet/) (Video calls), [Google Voice](https://privacyratings.com/virtual-phone-numbers/google-voice/) (Virtual phone numbers), [Google Public DNS](https://privacyratings.com/dns-resolvers/google-public-dns/) (DNS resolvers), [Google Cloud](https://privacyratings.com/server-hosting/google-cloud/) (Server hosting), [Chrome Remote Desktop](https://privacyratings.com/remote-desktop/chrome-remote-desktop/) (Remote desktop), [Google Keep](https://privacyratings.com/notes/google-keep/) (Notes), [Google Calendar](https://privacyratings.com/calendars/google-calendar/) (Calendars), [Google Forms](https://privacyratings.com/forms/google-forms/) (Forms and surveys), [Google Translate](https://privacyratings.com/translation/google-translate/) (Translation), [Google Gemini](https://privacyratings.com/ai-assistants/google-gemini/) (AI assistants), [Google Drive](https://privacyratings.com/cloud-storage/google-drive/) (Encrypted cloud storage), [Google Maps](https://privacyratings.com/maps/google-maps/) (Maps and navigation), [Google Analytics](https://privacyratings.com/web-analytics/google-analytics/) (Website analytics), [Google Home](https://privacyratings.com/smart-home/google-home/) (Smart home), [Google Nest Cam](https://privacyratings.com/security-cameras/google-nest-cam/) (Security cameras), [Fitbit](https://privacyratings.com/wearables/fitbit/) (Wearables and health), [Google Fit](https://privacyratings.com/fitness-trackers/google-fit/) (Fitness trackers), [Google Photos](https://privacyratings.com/photo-management/google-photos/) (Photo management)
- Grade: F (34/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | Google collects activity data across its services and uses it for analytics and personalized ads. | https://policies.google.com/privacy |
| No ads or data sales | No | Docs shows no ads, but Google is funded mainly by advertising and uses account activity across its services for personalized ads. | https://policies.google.com/privacy |
| Independent audit | Partial | Google Workspace, which includes Docs, has third-party SOC 2 audits. Only the SOC 3 summary report is public. | https://cloud.google.com/security/compliance/soc-3 |
| Transparency report | Yes | Publishes counts of government requests for user data and how often data is disclosed, updated twice a year. | https://transparencyreport.google.com/user-data/overview |
| Tells users about requests | Yes | Google emails the user before disclosing information unless legally prohibited or in emergencies. | https://policies.google.com/terms/information-requests |
| TLS configuration | Partial | Grade B | https://www.ssllabs.com/ssltest/analyze.html?d=docs.google.com&hideResults=on |
| Security headers | Partial | Grade B (70/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=docs.google.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/office-suites/google-docs/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/office-suites/google-docs.md