Looker
Business intelligence and data analytics platform on Google Cloud with LookML semantic modeling.
| Security & General Standards | |
|---|---|
| SOC 2 Type II | ✓ Google Cloud SOC 1/2/3 reports cover Looker (Google Cloud core) per services-in-scope list |
| SOC 3 | ✓ SOC 3 included in Google Cloud SOC reports covering Looker |
| SOC 1 Type II | ✓ SOC 1 included in Google Cloud SOC reports covering Looker |
| ISO 27001 (Information Security Management) | ✓ Covered by Google Cloud ISO 27001/27017/27018 certifications per services-in-scope list |
| ISO 27017 (Cloud Security) | ✓ Covered by Google Cloud ISO 27017 certification |
| ISO 27018 (Cloud Privacy) | ✓ Covered by Google Cloud ISO 27018 certification |
| ISO 27701 (Privacy Information Management) | ? Not documented in Google Cloud compliance scope |
| ISO 42001 (AI Management Systems) | ? Not documented in Google Cloud compliance scope |
| ISO 9001 (Quality Management) | ? Not documented in Google Cloud compliance scope |
| CSA STAR (Cloud Security Alliance) | ✓ Google Cloud holds CSA STAR certification at platform level |
| HITRUST CSF | ? Not documented in Google Cloud compliance scope |
| BSI C5 (German Cloud Security) | ~ Google Cloud C5 attestation covers platform; explicit Looker coverage not confirmed |
| Privacy & Data Transfer | |
| GDPR (EU) | ✓ Google Cloud GDPR compliance with Data Processing Amendment available |
| CCPA / CPRA (California) | ? Not explicitly documented on Google Cloud compliance pages |
| UK GDPR | ✓ UK GDPR addressed via Google Cloud DPA and regional data protections |
| LGPD (Brazil) | ? Not explicitly documented |
| PIPEDA (Canada) | ? Not documented on Google Cloud compliance pages |
| DPDP Act (India) | ? Not documented on Google Cloud compliance pages |
| PIPL (China) | ? Not documented on Google Cloud compliance pages |
| EU-US Data Privacy Framework | ✓ Google certified under EU-US Data Privacy Framework |
| Swiss-US Data Privacy Framework | ✓ Google certified under Swiss-US Data Privacy Framework |
| Global CBPR (APEC) | ? Not documented |
| Global PRP (APEC) | ? Not documented |
| Industry & Government | |
| HIPAA (US Healthcare) | ~ Google Cloud supports HIPAA with BAA; explicit Looker coverage in BAA not confirmed publicly |
| PCI DSS (Payment Card Industry) | ~ PCI DSS certification at Google Cloud platform level; cardholder-data use case support not confirmed |
| FedRAMP (US Federal) | ✓ Looker (Google Cloud core) received FedRAMP High authorization per Google Cloud blog |
| StateRAMP / TX-RAMP (US State) | ? Not documented |
| DORA (EU Finance) | ? Not documented |
| CJIS (US Law Enforcement) | ? Not documented for Looker |
| FINRA (US Broker-Dealers) | ? Not documented |
| IRAP (Australian Government) | ~ Google Cloud IRAP covers platform; explicit Looker coverage not confirmed |
| Emerging & Strategic | |
| NIST CSF (Cybersecurity Framework) | ? Not explicitly documented |
Data last verified: September 2026
Is this data outdated?
Spotted an error or a recent change in Looker's posture? Submit a correction.
Submit a correction →