Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Considering the recent litigation in which Google apparently claimed that all the emails, all the data in them, are Google's property and can do with the data whatever they want, I get frequent questions from our employees how does this translate into Gmail for business which we're using. Is the data in our corporate account also Google's property?

share|improve this question
up vote 2 down vote accepted

Send your employees to Google's Gmail for business benefits page. It says "When you put your data in Google Apps, you still own it, and it says just that in our contracts."

share|improve this answer
Is it encrypted? Can it be used by Google for ads, etc? – Ska Sep 10 '13 at 21:10
It is encrypted if you encrypt it. If you don't then it is unencrypted as far as Google is concerned (even if it went there encrypted using HTTPS) – Rory Alsop Sep 10 '13 at 21:24
No, it won't be used by Google for ads. That's how the free users "pay" for the free version of gmail. Is it encrypted on their servers? As far as I can tell Google promises only that it's encrypted in transport, but they use the word "secure" a lot in their marketing. – John Deters Sep 10 '13 at 21:31
If you have more questions, you should probably review your contract with Google. They'd explicitly state what you're paying for. We only know the information they make publicly available. – John Deters Sep 10 '13 at 21:32

If you're not encrypting your email, then you really can't be said to have any expectation of email privacy, so the flap about whether or not they scan your emails makes little sense to me. That email is scanned at every step of its journey, by various virus and spam scanners.

Google claims various rights regarding your content in their TOS, but the inherent copyrights, etc. stay with you. I've worked with Fortune 500 companies whose email was put through Google specifically because they could be relied on to keep it (it vastly simplifies SOX compliance, for example).

But if you're really worried about privacy, email is not the best medium.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.