Understanding access to the data

The following table lists the different types of data in the infrastructure of the SDS encryption service for Google Workspace and indicates whether they are accessible by Stormshield and Google.

Data type Accessible by
Stormshield
Accessible by Google
Encrypted user data
by a DEK
DEK
DEK encrypted by a KEK
KEK
IDP configuration

For more information on the definition of the DEK and KEK acronyms, refer to the Getting started section and the Google documentation on encryption operation.