Google Drive adds beta auto‑encryption for confidential files
By OAS
· 1 min read · Data safety · Automation
Google Workspace says its new beta feature lets admins automatically apply client‑side encryption to Docs, Sheets, Slides and Drive files that meet policy rules. The encryption is applied in place and works on My Drive and shared drives, helping meet compliance standards like HIPAA.
In short
- Automatic encryption removes manual steps for users.
- Encryption keeps the original file URL, so links keep working.
- Admins receive logs and alerts to monitor protection.
What it means for you
- Your sensitive client files can be encrypted automatically, reducing the risk of accidental exposure.
- Encryption is applied without changing the file’s URL, so existing links and workflows keep working.
- Admins get audit logs and alerts if the encryption key service fails, giving extra visibility into data protection.
The details
What happened
Google Workspace announced that, in beta, admins can use Policy‑Based Enforcement to automatically apply client‑side encryption (CSE) to files that match custom rules. The feature works with all file types supported by the Rules Engine, including Google Docs, Sheets, Slides, Microsoft Office files, PDFs and images. Encryption happens “in place,” preserving the original file URL, and users see an in‑product banner when opening an encrypted file.
What it means for your business
If you have a Google Workspace plan with Assured Controls or Assured Controls Plus, you can enroll in the beta and let the system encrypt files that contain confidential data—such as patient records, financial statements or proprietary designs—without requiring users to create separate encrypted copies. The built‑in audit logging and alert notifications let you monitor encryption activity and spot issues if your external Key Access Control List Service (KACLS) becomes unavailable.
What to do
- Verify your Google Workspace license includes Assured Controls or Assured Controls Plus.
- Submit the Policy‑Based Enforcement beta application with your domain information.
- Once approved, turn the feature ON in the Admin console and define rules that match the files you need to protect.
- Review the audit logs in the Security Investigation Tool and set up alert notifications for key‑service failures.
- Inform your team that they will see a banner when opening encrypted files, so they understand the change.
What to do this week
0 of 4 done
Practical AI and tech for running a small business.
The Open Arm Brief: answering calls and leads, automating busywork, getting found on Google, keeping data safe and avoiding scams. 5 minutes, Tuesday and Thursday mornings.
Free. One-click unsubscribe. Privacy
Sources (each opens the publisher's page)
More from AI News
What happened ·
Perplexity launches always‑on AI agents for ongoing work
According to The Decoder, Perplexity announced a new “Teammates” AI agent that stays active around the clock to handle ongoing tasks. The agents run on separate virtual machines and are accessed via threads in the Perplexity app or Slack, and they are available only on the Max plan, which costs $200 per month.
Read the storyHow it works ·
Perplexity’s “Teammates” AI agents for everyday workplace tasks
The Verge reports that Perplexity AI introduced “Teammates,” always‑on AI agents that can handle multiple jobs in a workspace. The agents run on Perplexity Computer, can be accessed via threads in the app or Slack, and require a $200‑per‑month Max plan subscription.
Read the storyWhat happened ·
Google Forms adds Gemini‑driven actionable insights
Google Workspace announced that the new actionable insights feature in Google Forms uses Gemini to analyze responses, surface counts, percentages, cross‑question patterns and suggested next steps. The feature is rolling out to Rapid Release domains from November 2 2026 and to Scheduled Release domains from November 19 2026.
Read the story
