Chapter 3: Application Security

Google Workspace has evolved over the years, introducing an increasing number of security features that are necessary for customers of all sizes, from small-to-medium businesses to large enterprises. Google has a security-first culture when it comes to building applications. To achieve defense-in-depth, security features should be in place at every level of the application. Security should never be an afterthought, especially for SaaS products; these products are accessible by almost everyone across the globe. The applications and their infrastructure must undergo continuous improvement, and any new vulnerabilities that are identified must be patched.

In Google Workspace, data protection is incorporated within every layer of the technology stack, beginning at the very bottom of the stack, where infrastructure is purpose-built and every server is embedded with a Titan chip. These chips have proven extremely difficult to be hacked, providing a secure...