Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is the legal agreement that governs your use of Google Cloud Platform, covering everything from compute and storage to AI and database services. The most important thing to understand is that Google can change, suspend, or discontinue services with notice, and your ability to recover losses is capped at fees you paid in the prior 12 months, meaning significant business disruption costs may not be recoverable. If you rely on GCP for critical workloads, you should review the Data Processing Addendum and any applicable service-specific terms before deploying sensitive or regulated data.
This document governs use of Google Cloud Platform (GCP) services and establishes a binding agreement between Google LLC (or the applicable Google entity) and the customer, incorporating by reference supplemental terms, service-specific terms, and the Google Cloud Privacy Notice. The agreement states that customers must comply with acceptable use policies, that Google may suspend or terminate services for violations or legal requirements, and the terms authorize Google to make changes to services with reasonable notice while reserving the right to discontinue any service. Several provisions are operationally significant for enterprise customers: the agreement asserts a broad indemnification obligation on customers for third-party claims arising from customer applications or data, and limits Google's aggregate liability to fees paid in the 12 months preceding the claim, with exclusions for indirect and consequential damages; these liability caps are standard in commercial cloud agreements but may be subject to negotiation in enterprise contracts and may be limited or unenforceable in certain jurisdictions. The agreement engages GDPR and other data protection frameworks through its incorporation of the Google Cloud Data Processing Addendum, and customers processing personal data of EU/EEA residents face obligations around lawful basis, data transfers, and controller-processor relationships that depend heavily on how GCP is configured and used. Compliance teams should note that the agreement's governing law (California, USA, for most customers) and mandatory dispute resolution provisions interact with jurisdiction-specific consumer and data protection laws, particularly for EU-based customers and those subject to sector-specific regulation such as HIPAA or financial services oversight.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Google Cloud has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Customer Indemnification Obligation and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.