What Is Included in Google Workspace? (w/Examples) + FAQs

Google Workspace includes a bundle of cloud-based productivity, communication, collaboration, security, and management tools, anchored by Gmail, Drive, Meet, Calendar, Docs, Sheets, Slides, Chat, Forms, Sites, Keep, Vault, the Admin Console, and Gemini AI features, delivered across Business, Enterprise, Frontline, Education, and Nonprofit editions. The exact apps, storage, AI features, and compliance controls you receive depend on the tier you buy, with every plan licensed per user and governed by the Google Workspace Terms of Service and the Data Processing Addendum.

The core problem Workspace solves is fragmentation, because teams stitching together email hosts, file servers, video tools, chat apps, and identity providers face rising costs, shadow IT, and compliance gaps under U.S. frameworks like HIPAA, FERPA, FedRAMP, and state laws like the CCPA. Google bundles these services, signs a Business Associate Agreement for covered entities, and pushes admin control into a single console.

According to Google’s 2025 Workspace customer data, more than 3 billion users and over 10 million paying businesses rely on the platform, a scale that shapes how features are priced, secured, and released.

• 🧩 What apps, storage, and AI features come in each Workspace tier
• 💼 How legal and compliance features like Vault, DLP, and the BAA work
• 🛡️ Which security controls protect admins, users, and sensitive data
• 📊 How Workspace stacks up against Microsoft 365 tier-for-tier
• 🧑‍🏫 Which editions fit small business, enterprise, schools, and nonprofits

The Core Definition of Google Workspace

Google Workspace is the rebranded, integrated successor to G Suite, launched in October 2020 and detailed in Google’s official launch announcement. It combines communication apps, content creation apps, and administrative tooling under a single per-user subscription, with data stored on Google Cloud infrastructure and governed by the Google Cloud Trust Center. Each paying customer gets a custom domain, admin controls, and service-level guarantees spelled out in the Workspace Service Level Agreement.

The suite is sold in editions, and each edition unlocks different apps, storage pools, AI features, security controls, and support tiers. Google publishes current pricing and feature matrices on the Workspace pricing page, and the U.S. government-specific version lives under the Assured Workloads program. Understanding what is included means understanding which edition you bought, because the word “Workspace” alone does not describe a fixed feature set.

The platform is regulated by the same U.S. laws that touch any cloud service, including the Stored Communications Act, HIPAA, FERPA, COPPA, and export-control rules under the EAR. Google addresses each through contract terms, technical controls, and audited certifications like ISO/IEC 27001 and SOC 2 and SOC 3. A customer who ignores these frameworks faces civil penalties, regulator investigations, and private lawsuits.

How Editions Differ

Editions differ across four levers: apps included, storage per user, AI and security features, and support response time. The Workspace Business Starter plan includes the core apps with 30 GB pooled storage per user, while Business Standard moves users to 2 TB pooled storage and unlocks larger Meet recordings. Enterprise tiers add advanced security, S/MIME encryption, Vault retention, and advanced endpoint management.

The consequence of choosing the wrong tier is immediate, because features you assume are “in Workspace” like Vault or DLP only appear once you reach Business Plus or Enterprise. A common misconception is that any paid plan includes eDiscovery, but Vault is limited to Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, and Education Plus per the Vault availability matrix.

A real example: a 12-person marketing agency picks Business Starter for the price, then loses a client dispute because the meeting recording feature and shared drives are absent, a gap that only appears above Starter. Upgrading mid-contract costs money and admin time, so tier selection matters at sign-up.

Licensing and Domain Basics

Every Workspace subscription is tied to a domain you own, verified through DNS records as described in the domain verification help article. Licenses are per user, not per device, and each user gets a branded email address, a profile, and a slice of the storage pool. The Acceptable Use Policy bans sharing one license among multiple humans, and violating it can trigger account suspension.

The consequence of buying too few licenses is shared logins, which breaks audit trails and violates the AUP. A named example helps: Priya, a solo realtor, buys one Business Standard seat but lets her two assistants share it, which means calendar conflicts, missing audit records, and potential termination. She should buy three seats, one per human, to preserve accountability.

Communication Apps Included in Google Workspace

Communication apps form the daily backbone of Workspace, and every paid edition includes Gmail with a custom domain, Google Calendar, Google Meet, and Google Chat. These apps are governed by U.S. wiretap and stored communications law, and admins must be careful because recording a Meet call without consent can violate state two-party consent statutes like California Penal Code § 632. Google provides visual and audible recording indicators to reduce that risk.

Gmail in Workspace includes custom-domain routing, spam and phishing filters, and on higher tiers, confidential mode, S/MIME encryption, and DLP rules. The consequence of skipping DLP is outbound leaks of protected health information, which triggers HIPAA breach notification duties within 60 days. A common misconception is that Gmail is automatically HIPAA-ready, but you must sign the Google Workspace BAA and configure covered services only.

Meet limits scale with tier, from 100 participants and no recording on Business Starter up to 1,000 participants with recording, noise cancellation, and in-domain live streaming on Enterprise, as listed on the Meet feature page. Chat adds threaded conversations, spaces, huddles, and Gemini-powered summaries on eligible plans.

Gmail With a Custom Domain

Gmail on Workspace delivers a branded address like [email protected], with routing, aliases, groups, and delegation controls inside the Admin Console. You also get Google’s advanced phishing and malware protection, which scans attachments in a sandbox and rewrites suspect links. Enterprise tiers add Security Sandbox and content compliance rules.

The consequence of running email on a free Gmail account for business is loss of control over offboarding, because a departing employee retains their personal account and any data in it. A named example: Marcus, a CPA, uses [email protected] during tax season, then loses access to a client’s shared draft when Google flags the account. On Workspace, admins can suspend, transfer, or take over a user in the user lifecycle docs.

Google Meet for Video Meetings

Meet is Google’s HD video conferencing service, accessible by link in any modern browser, and included in every paid Workspace edition. Features scale with tier, so recording, transcription, breakout rooms, polls, and attendance tracking only appear on Business Standard and above, as confirmed on the Meet feature matrix. Education tiers add quick access controls and moderator locks.

The consequence of skipping Business Standard in a medical practice is missing recordings for telehealth, which conflicts with CMS telehealth documentation rules. A real scenario: Dr. Nguyen, a family physician, runs visits on Business Starter and cannot store a recorded consent, which creates malpractice exposure when the patient later disputes the discussion.

Google Chat and Spaces

Chat offers one-to-one messaging, group chats, and persistent Spaces for project collaboration, with Gemini summaries on eligible plans per the Gemini for Workspace page. Spaces behave like channels in Slack or Teams and support threaded conversations, shared files, and assigned tasks. History retention is tied to Vault on qualifying tiers.

The consequence of turning off Chat history is losing discoverable records in litigation, which may breach the Federal Rules of Civil Procedure duty to preserve ESI. A named example: Ana runs legal ops at a biotech and orders history-on company wide, so when a patent suit hits, Chat transcripts are preserved and reviewable in Vault.

Google Calendar

Calendar handles scheduling, appointment booking pages, resource rooms, and shared team calendars. Appointment schedules are included on most paid tiers, with full booking pages on Business Standard and up, as described in the Calendar appointment booking help. Calendar also integrates with Meet for one-click video links.

The consequence of poor calendar hygiene is meeting overload and data exposure through over-shared events. Jamal, a sales manager, accidentally makes every event public, which leaks customer names; the fix is default sharing set to free/busy in the Admin Console under the calendar sharing settings.

Content Creation and Collaboration Apps

Every paid Workspace edition includes Google Docs, Sheets, Slides, Forms, Sites, and Keep. These apps live inside Google Drive, support real-time co-editing, and create native .gdoc, .gsheet, and .gslides files that do not count against storage on some tiers, per the storage policy page.

Drive storage is pooled across the organization, so a Business Standard tenant with 10 users has 20 TB total to allocate. The consequence of ignoring pooled storage is unexpected write-blocks when a few power users consume the pool. The storage management docs explain how admins can cap users and set alerts.

A common misconception is that Docs and Sheets are just stripped-down Word and Excel, but they include Smart Fill, Smart Canvas chips, connected sheets for BigQuery, and version history back to the first edit. Each of these features carries licensing nuances.

Docs, Sheets, and Slides

Docs supports page-less layouts, pageless tables, building blocks, and Gemini-assisted drafting on eligible plans. Sheets adds pivot tables, slicers, and formulas like =QUERY and =ARRAYFORMULA, with connected sheets on Enterprise tiers. Slides offers audience tools, speaker notes, and live captions.

The consequence of editing a shared Sheet without version discipline is lost data when a collaborator overwrites a formula. A named example: Sofia, a finance analyst, restores a quarter-end model from version history after a teammate pastes raw values over live formulas, saving a board deadline.

Drive, Shared Drives, and Storage

Drive provides personal My Drive and, on Business Standard and above, Shared Drives owned by the organization rather than an individual. Shared Drives survive user departures, which matters because files in a user’s My Drive can be orphaned when the license is deleted.

The consequence of keeping client files in My Drive is losing access when the owner leaves, a frequent malpractice claim in professional services. Derrick, a managing partner at a small law firm, moves all matter files to Shared Drives after an associate’s sudden resignation triggered a 72-hour scramble to recover a brief.

Forms, Sites, and Keep

Forms collects survey responses into Sheets, supports quiz mode, and accepts file uploads on paid plans. Sites builds lightweight intranets without code, and Keep captures quick notes and checklists. All three are included in every paid edition, with admin controls in the Admin Console services page.

The consequence of using public Forms for sensitive intake is accidental PHI collection without a BAA in place. Chen, a clinic manager, switches a patient intake form to require sign-in and restricts responses to the domain, aligning with HIPAA covered services.

Security, Management, and Compliance Features

Workspace bundles identity, device, and data protections, and the depth of those protections grows with the edition. Every tenant gets the Admin Console, 2-Step Verification, and basic endpoint management, per the endpoint management overview. Higher tiers add context-aware access, DLP, S/MIME, and Vault.

These controls map to U.S. compliance frameworks like HIPAA Security Rule, the FTC Safeguards Rule, and CMMC for defense contractors. The consequence of skipping them in a regulated industry is enforcement action, because regulators expect reasonable administrative, physical, and technical safeguards.

A common misconception is that Google handles all security by default, but the shared responsibility model assigns customer duties like user access reviews, MFA enforcement, and data classification.

Admin Console and Identity

The Admin Console is the single pane of glass for users, groups, devices, apps, and security. Admins can enforce SSO with SAML, require security keys, and assign granular admin roles. Roles are least-privilege by design.

The consequence of granting too many Super Admin roles is a single compromised account taking over the tenant. Elena, an IT director, reduces Super Admins from eight to two after a phishing scare and uses delegated admin roles for help desk work.

Google Vault for eDiscovery

Vault provides retention, legal holds, search, and export across Gmail, Drive, Chat, Meet recordings, Groups, and Voice on eligible tiers. Retention rules can be custom or organization-wide, and holds suspend deletion during litigation, aligning with FRCP Rule 26.

The consequence of missing Vault in a lawsuit is spoliation sanctions. Raj, general counsel at a fintech, applies a Vault hold within hours of receiving a preservation letter, avoiding the fate described in Zubulake v. UBS Warburg.

Data Loss Prevention and Encryption

Workspace DLP scans outgoing Gmail and Drive content for patterns like SSNs or credit card numbers, with rules documented in the DLP help center. Enterprise Plus and Education Plus add Client-Side Encryption, which lets customers hold their own keys through an external KMS.

The consequence of no DLP is quiet leakage, because users paste PII into emails to personal accounts. A named example: Hannah, a benefits administrator, prevents 400 SSN-laden emails in her first month after turning on a predefined DLP rule.

Endpoint and Context-Aware Access

Endpoint management enforces screen locks, encryption, and remote wipe on Android and iOS at no extra cost, with advanced controls on higher tiers. Context-Aware Access restricts app use based on device posture, IP range, or location.

The consequence of letting unmanaged devices sync corporate data is theft exposure. Tomás, a CIO, requires managed device status before Drive sync, which blocks a stolen laptop from downloading a merger folder.

Google Workspace Editions and What Each Includes

Google sells Workspace in five families: Business, Enterprise, Frontline, Education, and Nonprofits, each detailed on the plans overview page. Every family uses the same core apps, but storage, Meet limits, security, and Gemini AI availability differ. Pricing is per user per month and typically requires an annual commitment for the advertised rate.

The consequence of mixing families inside one tenant is inconsistent features and confusing user experiences. A common misconception is that Nonprofit and Education editions are “lite,” but Education Plus actually exceeds Business Plus in several areas, as shown in the Education editions comparison.

U.S. customers also gain access to the Assured Controls add-on for data sovereignty. A named example: Kenji, a school district CTO, chooses Education Plus to unlock originality reports, advanced security, and larger Meet sessions for 5,000 students.

Business Editions

Business editions top out at 300 users and include Business Starter, Business Standard, and Business Plus. Starter delivers 30 GB pooled storage, 100-participant Meet, and no recording. Standard raises storage to 2 TB pooled, enables 150-participant Meet with recording, and adds noise cancellation. Plus adds 5 TB pooled, Vault, advanced endpoint management, and attendance tracking, per the Business plan comparison.

The consequence of hitting 300 users on a Business plan is forced migration to Enterprise, which can take weeks. Carmen, COO of a fast-growing agency, migrates 280 seats to Enterprise Standard before hitting the cap to avoid renewal disruption.

Enterprise Editions

Enterprise Standard and Enterprise Plus remove user caps, add S/MIME, advanced DLP, Vault, Context-Aware Access, and on Plus, Client-Side Encryption. Meet scales to 1,000 participants with in-domain live streaming for 100,000 viewers. Support is upgraded to Enhanced or Premium per the support tiers page.

The consequence of running regulated workloads without Enterprise Plus is missing CSE, which can block sovereignty mandates in defense and healthcare. Lt. Col. (ret.) Barnes, a defense contractor CIO, requires Enterprise Plus with CSE to meet CMMC Level 2 expectations.

Frontline, Education, and Nonprofit

Frontline editions target shift and deskless workers with lower per-seat pricing, shared devices, and a slimmer feature set, documented on the Frontline page. Education editions include Fundamentals (free for qualifying schools), Standard, Teaching and Learning Upgrade, and Plus, with details on the Education editions page. Nonprofits can receive Workspace for Nonprofits free or discounted via the Google for Nonprofits program.

The consequence of buying the wrong education tier is losing originality reports or Classroom add-ons. A named example: Principal Okafor upgrades from Fundamentals to Teaching and Learning Upgrade to unlock originality reports across multiple student assignments.

Three Common Scenarios for Workspace Buyers

Different buyers use Workspace differently, and the right edition depends on headcount, regulation, and collaboration style. The tables below show real buyer choices and the outcomes that follow each decision.

Small Business Without Regulation

Healthcare Practice With HIPAA

Regulated Enterprise With eDiscovery Needs

Named Examples of Workspace in Action

• Priya Sharma, a solo realtor in Austin, uses Business Standard to run branded Gmail, shared listing Drive folders, and Meet for client walkthroughs, replacing a patchwork of free tools.
• Marcus Johnson, a CPA in Cleveland, runs Business Plus with Vault enabled to preserve client email during IRS disputes and uses DLP to block outbound SSNs.
• Dr. Anjali Nguyen, a family physician in San Jose, runs Enterprise Standard under a signed BAA, stores chart notes in Drive with labels, and records telehealth visits in Meet with documented consent.
• Coach Ramirez, an athletic director at a Texas school district, uses Education Plus for Classroom, originality reports, and stadium-sized Meet events for parent nights.
• General Counsel Raj Patel, at a Boston fintech, applies Vault legal holds within two hours of a preservation letter, using Enterprise Plus with CSE to satisfy investor diligence.

Mistakes to Avoid With Google Workspace

• Sharing one license across several humans, which breaks the Acceptable Use Policy and erases audit trails, leading to suspension and compliance findings.
• Storing PHI without signing the BAA, because uncovered services like personal Maps or YouTube cannot hold PHI and can trigger HIPAA penalties up to $2.1 million per violation category per year.
• Keeping client files in personal My Drive folders, which orphans data when a user leaves and can violate ABA Model Rule 1.15 on safekeeping property.
• Granting Super Admin to every IT staffer, which concentrates blast radius during a phishing incident and contradicts least-privilege guidance in NIST SP 800-53.
• Skipping 2-Step Verification enforcement, because Google research shows basic account hygiene stops up to 100% of automated bots.
• Assuming Vault is in every tier, because it is absent from Business Starter, Business Standard, and Education Fundamentals, and missing it during litigation invites spoliation sanctions.
• Using unmanaged personal phones to sync corporate Gmail, which blocks remote wipe if the phone is stolen and risks exposure under state breach laws like the New York SHIELD Act.
• Ignoring DLP rules, because outbound leakage of SSNs or PCI data triggers notification duties in 50 states and the FTC Safeguards Rule.
• Recording Meet calls without consent in two-party states, which can violate California Penal Code § 632 and similar laws in Florida and Pennsylvania.

Do’s and Don’ts of Configuring Workspace

• Do enforce phishing-resistant MFA using security keys, because SMS codes are vulnerable to SIM-swap attacks.
• Do move all matter files into Shared Drives so the organization, not the user, owns the data.
• Do review admin roles quarterly to align with NIST least-privilege guidance.
• Do sign the BAA before any PHI touches Workspace, even in a single Gmail message.
• Do turn on Vault retention rules on eligible tiers to preserve email, Chat, and Drive content uniformly.
• Don’t allow personal Gmail forwarding, because it exports regulated data outside the tenant and breaks DLP.
• Don’t rely on Business Starter for regulated work, because Vault, DLP, and S/MIME are unavailable.
• Don’t skip user offboarding steps in the offboarding guide, which covers data transfer, license reclaim, and suspension.
• Don’t publish Sites publicly without review, since accidental exposure of internal wikis is a common source of data leaks.
• Don’t ignore the Workspace status dashboard, because incident awareness shapes user communication and SLA credit claims.

Pros and Cons of Google Workspace

• Pro: Strong real-time collaboration, because Docs and Sheets were built cloud-first rather than retrofitted.
• Pro: Unified admin across mail, files, video, chat, and devices, lowering operational overhead.
• Pro: Deep U.S. compliance coverage through HIPAA BAA, FedRAMP High for Assured Workloads, and ISO 27001.
• Pro: Predictable per-user pricing with published plans, avoiding surprise invoices.
• Pro: Gemini AI features built into Docs, Sheets, Gmail, and Meet on eligible tiers, per the Gemini for Workspace page.
• Con: Desktop app parity with Microsoft Office is limited, so heavy Excel macro users may feel friction.
• Con: Advanced features like CSE and S/MIME require the top Enterprise tier, which carries a higher per-seat cost.
• Con: Vault and DLP absent from lower tiers, forcing regulated buyers to skip Business Starter and Standard.
• Con: Pooled storage can be exhausted by a few heavy users, which can silently block writes across the tenant.
• Con: Migrations from Microsoft 365 require planning, and Google’s data migration service has mailbox size and throughput limits.

Google Workspace vs. Microsoft 365

Workspace and Microsoft 365 target similar buyers but differ in app philosophy, offline depth, and ecosystem lock-in, as outlined on the Microsoft 365 plans page. The table below maps typical tier equivalents.

The consequence of matching the wrong tiers is overpaying or under-protecting. CFO Lin, a hospital system buyer, maps Enterprise Plus to Microsoft E5 for a fair total-cost-of-ownership comparison rather than pitting Business Standard against E5.

Key Entities in the Workspace Ecosystem

• Google LLC is the vendor, and the Alphabet Inc. parent is the public reporting entity.
• Google Cloud operates the infrastructure, data centers, and compliance programs that underpin Workspace.
• The FTC enforces the Safeguards Rule and consumer protection actions touching cloud data.
• The HHS Office for Civil Rights investigates HIPAA breach complaints involving Workspace tenants.
• The Department of Education oversees FERPA for Education edition customers.
• FedRAMP authorizes cloud services for federal agencies, including Workspace Assured.
• NIST publishes the cybersecurity frameworks (800-53, 800-171, CSF 2.0) that shape Workspace admin controls.
• The Cybersecurity and Infrastructure Security Agency publishes Secure Cloud Business Applications guidance with specific Workspace baselines.

The Google Workspace Setup and Onboarding Process

Setting up Workspace follows a predictable flow, and each step has options that carry compliance and operational consequences. Google documents the main flow in the setup wizard help article, and the Admin Help Center covers advanced configuration.

The consequence of rushing setup is technical debt, because defaults like global sharing, unrestricted app installs, and weak MFA become hard to undo once users depend on them. A common misconception is that setup is a one-time event, but Workspace requires ongoing governance, including quarterly access reviews and annual policy updates.

Step 1: Domain Verification

Verify your domain by adding a TXT record at your DNS registrar, as described in the verification guide. The choice between a primary domain and secondary domain matters because only the primary appears in billing records.

Step 2: User Provisioning

Create users manually, via CSV, or through directory sync with Google Cloud Directory Sync. SSO and SCIM provisioning from Okta, Entra ID, or JumpCloud are also supported. Provisioning choices drive lifecycle accuracy.

Step 3: Security Baseline

Enforce 2-Step Verification, admin role least-privilege, context-aware access, and session length policies. Turn on alerts in the Security Center on eligible tiers. Baseline settings should be documented in a written information security program aligned with the FTC Safeguards Rule.

Step 4: Data Migration

Migrate mail, calendar, and contacts from Microsoft 365, Exchange, or IMAP using the Google Workspace Migrate tool. Drive migrations can use the same tool or third-party vendors. Plan for mailbox size caps and throughput ceilings to avoid missing data.

Recap of Key Rulings and Regulatory Actions

Several rulings and actions shape how Workspace is used in regulated settings. Zubulake v. UBS Warburg established the modern duty to preserve electronically stored information, which drives Vault adoption. The 2013 HIPAA Omnibus Rule extended BAA duties to cloud subcontractors, clarifying Google’s role as a business associate.

The consequence of ignoring these rulings is real money: OCR HIPAA settlements routinely reach seven figures, and FRCP Rule 37 sanctions include adverse inference instructions that can decide a case. A named example: Attorney Delgado cites Zubulake when training partners on Vault holds, which heads off a spoliation motion in a later trade-secret dispute.

FAQs

Does Google Workspace include Gmail with a custom domain?

Yes. Every paid edition includes Gmail on your verified domain, with aliases, groups, and admin routing, configured inside the Admin Console after DNS verification.

Does Google Workspace include Microsoft Office apps?

No. Workspace does not include Word, Excel, or PowerPoint, but Docs, Sheets, and Slides can open and edit Office files natively through Office editing mode.

Is Google Workspace HIPAA compliant out of the box?

No. HIPAA compliance requires signing the Google BAA, restricting PHI to covered services, and configuring admin controls that match Security Rule expectations.

Does every Workspace plan include Google Vault?

No. Vault is limited to Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, and Education Plus, per the Vault availability matrix.

Does Google Workspace include AI features like Gemini?

Yes. Gemini for Workspace features are built into eligible Business Standard, Business Plus, Enterprise Standard, and Enterprise Plus plans, as described on the Gemini for Workspace page.

Is there a free version of Google Workspace for businesses?

No. Businesses need a paid plan, although Google for Nonprofits offers Workspace for Nonprofits at no cost to qualifying organizations and Education Fundamentals is free for qualifying schools.

Does Google Workspace include unlimited storage?

No. Storage is pooled per user and capped by tier, with 30 GB on Business Starter up to 5 TB per user on Enterprise Plus, and additional storage available through the add-on storage pool.

Does Google Workspace comply with FedRAMP?

Yes. The Assured Workloads offering is authorized at FedRAMP High and supports U.S. public-sector workloads with regional and personnel controls.

Can Google Workspace replace my phone system?

Yes. Google Voice is a separately licensed add-on that provides business phone numbers, voicemail transcription, and routing, and it integrates with Meet and Calendar.

Does Workspace include protection against phishing and malware?

Yes. Advanced phishing, malware, and attachment sandboxing are included, with deeper controls like Security Sandbox and enforced safe browsing on higher tiers.

Is Google Workspace suitable for law firms with eDiscovery duties?

Yes. Business Plus and Enterprise tiers include Vault, supporting retention, legal holds, and export in line with FRCP preservation obligations.

Does Google Workspace include device management?

Yes. Basic mobile management is included on every edition, and advanced endpoint management with context-aware access is available on Enterprise and Education Plus per the endpoint management help.