“Documents within your G Suite domain are not end-to-end encrypted, meaning that Google has everything they need to read your data,” Shelton writes.
Shelton on Wednesday published blog post detailing all the ways Google itself can access the contents of your G Suite account.
Google Workspace provides audit logs, which allow administrators to see who has looked at, or modified each document, as well as chat activity within the organization. Administrators can monitor Gmail, Calendar, Drive, Sheets, Slides, Meet, Chat, and more, from both desktop and mobile devices. This may also include other forms of metadata, including IP addresses. Administrators can even receive push alerts for targeted behaviors. This could be used for organizations that want to monitor for behaviors they deem suspicious.