Google Workspace announced in November 2026 that client-side encryption (CSE) can now be applied automatically to confidential files in Docs, Sheets, Slides and Drive. The feature is in beta.
What's new
- Policy-based encryption: admins set rules in the Workspace rules engine, and matching files are encrypted in place, keeping their original link.
- Wide coverage: Google Docs, Sheets and Slides, Microsoft Office files and other formats such as PDFs and images, in My Drive and shared drives.
- Before this: people had to create encrypted copies by hand and remember to delete the originals.
- Who can use it: Workspace Enterprise Plus customers with the Assured Controls or Assured Controls Plus add-on, after applying for the beta. It is off by default.
Get more out of Google Workspace
Migration, administration and a Gemini rollout your team actually uses. Talk it through with us, free.
Why it matters for your business
Google positions it for strict compliance needs such as ITAR, EAR and HIPAA. Most small businesses aren't on Enterprise Plus with Assured Controls, so this beta won't reach them yet. The direction is clear, though: protecting sensitive files is moving from something people must remember to something a rule does for them.
Whatever plan you're on, Workspace already has settings that matter just as much: sharing defaults, data loss prevention where your edition includes it, and proper handling of leavers' accounts.
How D3V can help
- We review and tighten Google Workspace security: sharing settings, access and leavers.
- For regulated teams, CloudCare Security covers HIPAA readiness, starting with a free security assessment.
Source: Google Workspace Updates.
