Skip to main content

Google Workspace Updates

This official feed from the Google Workspace team provides essential information about new features and improvements for Google Workspace customers.
  • The Workspace Policy API provides a centralized, comprehensive view of your security settings, eliminating the need to navigate to numerous pages in the Admin console.

    With our latest update, we are introducing mutate endpoints (Create, Update, Delete) alongside existing read-only capabilities (Get, List) for data loss prevention (DLP) rules and detectors. This allows super admins to programmatically manage and fully automate the entire lifecycle of their DLP policies, from initial creation to real-time activation and deactivation.

    Note this is an API-only launch for capabilities currently supported in the Admin console.

    About DLP

    DLP lets Workspace admins control external file sharing to prevent sensitive information leaks. It scans files for violations, triggering incidents and protective actions like content blocking.

    How DLP works:

    • Admins define rules for sensitive content across Drive, Gmail, Chat, and Chrome.
    • DLP scans content for DLP rule violations that trigger DLP incidents.
    • DLP enforces the rules you defined and violations trigger actions, such as alerts.
    • Admins are alerted for DLP rule violations.
    Summary of capabilities supported by mutate endpoints for DLP

    Getting started

    • Admins: You must be a super admin to use the Policy API. See our developer documentation to learn more about the Policy API. You can also use GAM, an open source tool for managing Workspace, which now supports the Policy API.
    • End users:This is an admin-only capability.

    Rollout pace

    Availability

    • Available to all Google Workspace customers and Workspace Individual subscribers

    Resources

  • Building on our October launch, Gemini in Google Classroom can now help educators more easily convert rubric files and images into Google Classroom rubrics, right within the assignment creation workflow. Educators can now upload more file types, such as .jpeg and .png files. For example, by uploading a photo of a physical rubric or using existing files, Gemini in Classroom can help educators quickly generate structured, interactive rubrics within the Classroom interface. They can then make edits to the converted rubric before saving it. This Gemini-powered automation reduces manual data entry and helps educators maintain consistent grading standards across their assignments.

    With this launch, rubric conversion will be controlled by the Gemini in Classroom setting in the Admin console. If Gemini in Classroom is disabled for your organization, you’ll no longer be able to convert rubrics from documents or images.

    This feature is only available in English for users over age 18.

    Getting started

    Rollout pace

    Availability

    • Education: Education Fundamentals, Standard, and Plus

    Resources

  • Google Drive is introducing alignment approvals, a lightweight mechanism that allows teams to request and record document sign-offs without file changes resetting the approval flow. When a document is in a partially approved state, collaborators can continue making edits without resetting any recorded approver decisions.

    Alignment approvals can be initiated via a new checkbox within the standard request dialog across web clients.


    When checked, "Require all approvers to review the same content" resets pending approvals if the file content changes. This is the default behavior.


    When unchecked, changes to the file content don't reset pending approvals.

    This feature serves use cases where strict content locking is unnecessary, making it easier for teams to maintain momentum on fluid projects. While an approval remains pending, individual approvers retain the flexibility to manually reset their approved status back to pending if subsequent content edits no longer match their expectations.

    This update follows a series of recent enhancements to the Drive approvals ecosystem, including programmatic approval management with the Drive API.

    Getting started

    • Admins:Approval requests are enabled by default and can be disabled at the domain, OU, and group level. There is no admin setting that controls alignment approvals specifically; users can access them if they have access to the broader approval request feature. Visit the Help Center to learn more about managing Drive approvals.
    • End users: Alignment approvals will be off by default and can be enabled by the user. Visit the Help Center to learn more about getting approvals in Drive.

    Rollout pace

    Availability

    • Business: Business Standard and Plus
    • Enterprise: Enterprise Starter, Standard, and Plus
    • Education: Education Plus
    • Other Editions: Enterprise Essentials and Enterprise Essentials Plus; Nonprofits
    • Education Add-ons: Teaching and Learning

    Resources

  • Organize My Files in Drive now generally available

    In October 2025, we launched a beta for Organize My Files in Drive. This feature is now generally available and has started rolling out to eligible Google Workspace and Google AI plans. | Learn more about how Organize My Files in Drive is now generally available.

    Introducing the ability to loop over a list of items in Workspace Studio

    We are introducing the ability to loop over a list of items in Google Workspace Studio flows, bringing more power and flexibility to your everyday workflows. | Learn more about the ability to loop over a list of items in Workspace Studio.

    Enhanced data protection for managed third-party apps

    With this release, users are now able to maintain efficient workflows and securely move data between corporate Workspace accounts and other authorized, managed third-party applications without being blocked. | Learn more about enhanced data protection for managed third-party apps.

    Quickly scan multiple pages in Google Drive on Android

    Tired of scanning one page at a time? With the new Document Scanner in Google Drive on Android, you can now scan multiple pages at the same time. | Learn more about how to Quickly scan multiple pages in Google Drive on Android.

    New data loss prevention capabilities for file attachments and proximity conditions are generally available 

    Data loss prevention (DLP) rules for non-Workspace file attachments and associated proximity conditions are now generally available. These new capabilities enable organizations to target files with specific parameters, such as blocking the sharing of sensitive file formats or identifying files that contain specific strings in their titles. | Learn more about the new data loss prevention capabilities for file attachments and proximity conditions are generally available.

    Data loss prevention policies for Google Calendar now available in GA

    Data loss prevention (DLP) for Google Calendar is now generally available to protect sensitive information shared within event details. | Learn more about data loss prevention policies for Google Calendar now available in GA.

    Gmail as a source in Ask Gemini in Drive now generally available

    Gmail sources in Ask Gemini in Drive is now generally available and has started rolling out to eligible Google Workspace and Google AI plans. Ask Gemini in Drive offers a dedicated, immersive workspace designed for deep focus. Users can engage in high-context, multi-turn conversations to efficiently explore and understand content. | Learn more about Gmail as a source in Ask Gemini in Drive now generally available.
  • We’re introducing an expanded set of native Apple Mobile Device Management (MDM) settings to Google Endpoint Management, providing administrators with more granular control over how iOS devices are configured and secured. These new settings—spanning categories such as Apps and Services, Device Features, Data Sharing, and Backup & iCloud Sync, etc—allow admins to manage critical device behaviors directly from the Google Workspace Admin console. This update allows organizations to efficiently harden their security posture for both corporate-owned and BYOD iOS devices. With this launch, these settings will become generally available.

    See below for a detailed list of the new settings by category.

    Apps and Services- Writing tools, App clips, App installation from web, App installation from alternative marketplaces, Apps to be hidden, Locking apps, In app purchases


    Safari - Safari history clearing, Safari private browsing

    Device Features - Auto unlock, Call recording, Auto dim, Default browser modification, Personalized advertising, eSIM outgoing transfers, OTA PKI updates, iPhone mirroring, Satellite connection, RCS messaging, Unpaired external boot to recovery, Untrusted TLS prompt, Limit ad tracking, AirPlay outgoing requests pairing password, Preserve eSIM on erase

    Backup and iCloud Sync - Enterprise book backup

    Authentication - Fingerprint for unlock

    Data Sharing - Managed pasteboard

    Getting started

    Rollout pace

    Availability

    • Available to all Google Workspace customers with Google Endpoint Management

    Resources

  • Gmail sources in Ask Gemini in Drive is now generally available and has started rolling out to eligible Google Workspace and Google AI plans.

    Ask Gemini in Drive offers a dedicated, immersive workspace designed for deep focus. Users can engage in high-context, multi-turn conversations to efficiently explore and understand content.

    Previously, users could only add files and folders as sources within Ask Gemini in Drive. Now, users can unlock deeper insights by adding Gmail threads as sources in Ask Gemini for Drive. Users can ground their responses in a complete view of their business context—spanning emails, files, and folders—to ensure the most helpful and accurate answers possible.

    Visit the Help Center for more information on the locations and languages where Ask Gemini in Drive is currently supported.

    Getting started

    Rollout pace

    Availability

    • Business: Business Standard and Plus
    • Enterprise: Enterprise Standard and Plus
    • Consumer:Google AI Pro and Ultra
    • Education Add-ons:Google AI Pro for Education
    • Other Add-ons:AI Expanded Access

    Resources

  • Data loss prevention (DLP) for Google Calendar is now generally available to protect sensitive information shared within event details. Previously available in beta, this feature allows you to create and apply data protection rules that scan calendar event titles, descriptions, and locations for sensitive content, such as credit card numbers or national identification numbers.

    Key functionalities include:

    • Choice of actions:Admins can choose to audit when an event is saved with sensitive content, warn users about sensitive content in their event, or block event creation or updates if a DLP policy is violated.
    • Event details: DLP rules scan free-text fields in the event, including the event’s title, description, and location fields.
    • Owner-based policies:Rules are applied based on the organizational unit (OU) of the owner (event organizer on primary calendars or calendar owner on secondary calendars), consistent with other Workspace DLP configurations.
    • User notifications: With DLP policies for Calendar, users receive immediate feedback when sensitive data is detected. On the web, users see a pop-up notification explaining the issue. Admins can also customize this message with more specific details. If a meeting update is blocked on Android, iOS, or via the Calendar API, the user will receive an automated email notification explaining the policy violation and why changes to the meeting invite were not successful.

    Getting started

    • Admins:The feature will be OFF by default and can be enabled at the organizational unit (OU) or group level. Visit the Help Center to learn more about DLP for Calendar.
    • End users:There is no end user setting for this feature.
    DLP settings in the admin console to configure policies for sensitive data, including actions and alerts when creating Calendar events
    An end user is prompted with a message asking them to remove sensitive information

    Rollout pace

    Availability

    • Enterprise: Enterprise Standard and Plus
    • Education: Education Fundamentals, Standard, and Plus
    • Other Editions: Enterprise Essentials; Frontline Standard and Plus

    Resources

  • Data loss prevention (DLP) rules for non-Workspace file attachments and associated proximity conditions are now generally available. These new capabilities enable organizations to target files with specific parameters, such as blocking the sharing of sensitive file formats or identifying files that contain specific strings in their titles.

    Using these new content conditions, admins can set up various DLP rules for added protection, such as:

    • File names: Block files containing text string “funkyword”
    • File extensions: Block .java files
    • File types:Block custom mime type such as application/custom_app
    • Proximity matching:Detect “routing number” in proximity of 100 characters of “account number”

    Additional details

    In addition to file-based conditions, administrators can utilize associated proximity conditions to identify sensitive information in the file. This feature allows for the detection of sensitive data that appears within a specified distance of other predefined data types, regular expressions, or word lists.

    For example, a rule can be configured to trigger when a bank account number is found within 100 characters of a routing number. By identifying data in context, proximity matching helps administrators reduce false positives and more accurately secure financial information or proprietary content.

    Key functionality in DLP rules for file attachments and associated proximity conditions include:

    • Ability to match against common or custom MIME types and system file categories
    • Support for scanning attachments in Gmail, Drive, and Chat to set rules across communication channels 
    • Granular distance settings for proximity matching, allowing admins to define a range of up to 1,000 characters between matched conditions

    Getting started

    • Admins: When configuring DLP rules in the admin console, admins can locate the new content conditions of file extension, file name, and file type under content conditions. Admins can also select the option of proximity matching to set a maximum distance between two pieces of matched texts. Visit the Help Center to learn more.
    • End users: There is no end user setting for this feature.
    Content conditions for DLP in the Admin console to configure policies for sensitive file attachments

    Rollout pace

    Availability

    • Enterprise: Enterprise Standard and Plus
    • Education:Education Fundamentals, Standard, and Plus
    • Other Editions: Enterprise Essentials; Frontline Standard and Plus

    Resources

  • Tired of scanning one page at a time? With the new Document Scanner in Google Drive on Android, you can now scan multiple pages at the same time. Flip through the pages of a book or lay your receipts out on a table and our Document Scanner will identify, separate, and capture each page within the camera view. It even detects duplicates to prevent accidental re-scans.

    Note this is only available for Android devices with 8GB+ RAM.

    New multi-page scanning with Android Document Scanner

    Getting started

    Rollout pace

    Availability

    • Available to all Google Workspace customers, Workspace Individual subscribers, and users with personal Google accounts

    Resources

  • Previously, data transfers from corporate Google Workspace accounts to third-party apps were restricted. We’re now recalibrating these restrictions to allow for a "trusted ecosystem" between managed apps.

    With this release, users are now able to maintain efficient workflows and securely move data between corporate Workspace accounts and other authorized, managed third-party applications without being blocked. For added data protection, this capability strictly prevents the transfer of that data to personal accounts within the same managed Google application or to unmanaged personal apps.

    For example, a user is able to copy a client's email address from their corporate Gmail account and successfully paste it into a managed third-party CRM application. When they try to paste that same email address into their personal Gmail account, they are blocked and receive the following message: "This information can only be shared within your organization's Google Workspace apps.”

    Getting started

    • End users: There is no end-user setting for this feature.

    Rollout pace

    Availability

    • Enterprise: Enterprise Standard and Plus
    • Education: Education Standard and Plus
    • Other Editions:Frontline Standard; Enterprise Essentials Plus; Cloud Identity Premium

    Resources