You can now set client-side encryption as default mode for new emails, events, and files on mobile

Gif Credit: Google Workspace Updates

Google is rolling out new controls that let you set client-side encryption (CSE) as the default mode for new Gmail messages and replies, Google Calendar events, and Google Drive files on Android and iOS devices. This feature was initially launched on the web and is now expanding to mobile devices.

Each new email, event and uploaded file on mobile is automatically client-side encrypted with customer-managed keys, which means the user is compliant with their org's policy from the outset.

"This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. For organizations with strict regulatory or sovereignty requirements, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data while on the go," Google explained in a blog post.

The new setting is gradually rolling out to both Rapid Release and Scheduled Release domains and may take up to 15 days to be fully visible.

Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only.

Google Workspace already utilizes the latest cryptographic standards to encrypt data by default, both at rest and in transit between its facilities. However, CSE provides an additional layer of security by giving organizations complete control and privacy as the sole proprietor of private encryption keys and the identity provider of the encryption keys. This subsequently gives organizations greater confidence that their confidential data cannot be accessed by any third party, including Google and foreign governments.