Join the waitlist

Google Gemini

Google · AI assistantInline enforcement

Reaches most fleets without anyone installing anything, because it is attached to accounts staff already have. The consumer and Workspace tiers have very different terms.

What leaks through it

Documents, spreadsheets and slides pasted or uploaded whole. The risk is rarely the question and almost always the attachment: a board deck goes across to get a summary of one slide.

  • gemini.google.com

Guardrails that stop it

Block and Mask run inline on the request, on the device, before the bytes leave it. Everything after that point is alerting, because no product can un-send a prompt.

  • MaskNo secrets in inputALC-001

    Credentials inside a pasted document are masked before the upload leaves, without blocking the work.

  • AlertDenied topicsALC-004

    Project codenames and the classification words you choose to watch for, matched on the prompt itself, which is where a pasted document arrives.

  • AlertPII in input (basic)ALC-006

    Customer emails and identifiers in an uploaded spreadsheet, with the prompt attached to the finding.

  • AlertInternal host / URL leakALC-005

    Internal URLs and private IPs pasted in as context.

Those are the ones worth spelling out for Google Gemini. All 27 rules in the catalog apply, and you can see the full catalog.

What happens to whatever gets through

Model training
Consumer Gemini Apps activity is used to improve Google services, and human reviewers may read sampled conversations. Gemini in Workspace is covered by Workspace terms and is not used to train models.
Retention
Consumer activity is kept per the Gemini Apps Activity setting (default 18 months, adjustable); reviewed samples are kept separately for up to three years.
Data residency
Global Google infrastructure; Workspace data regions apply to the Workspace tier.

The vendor’s own controls

  • Workspace admin console policy per OU
  • Gemini Apps Activity can be disabled by policy
  • Vault retention and export for the Workspace tier

Sources

Vendor terms last checked August 14, 2026, and summarised from Google’s published documentation. Confirm against the sources above before writing policy around this page.

Turn these on across your fleet.

Alectura ships these rules as a catalog you enable, not a policy language you learn. One sensor on the device, enforcing before anything leaves it.