Trust Hub
Legal Resources at PeopleForce
PeopleForce Infrastructure on Google Cloud Platform (GCP)
Published on February 17, 2026
PeopleForce uses Google Cloud Platform (GCP) as its cloud infrastructure for hosting, processing, and securing Customer Data. This choice forms part of our long-term strategy aimed at ensuring a high level of reliability, scalability, performance, and operational resilience, as well as compliance with modern information security and personal data protection requirements.
The PeopleForce infrastructure, deployed using Google Cloud Platform (GCP) services, is designed in accordance with the principles of security by design and privacy by design. It complies with the requirements of the GDPR and internationally recognized information security standards and supports the implementation of appropriate technical and organizational measures to protect Customer Data against unauthorized access, loss, or unlawful use.
Data Hosting and Processing
- Cloud infrastructure: Google Cloud Platform (GCP)
- Data processing region:
- Netherlands — europe-west4 (Eemshaven)
PeopleForce primarily processes personal data within the European Union. Where transfers of personal data outside the EU are required, such transfers are carried out in accordance with applicable data protection laws and are subject to appropriate safeguards.
Benefits of Using Google Cloud Platform for Customers
- Enterprise-grade infrastructure
Google Cloud Platform provides a reliable and scalable cloud environment that supports high levels of availability, security, and performance. Leveraging this infrastructure enables the platform to operate consistently and to scale efficiently in line with business and technical requirements. - Improved uptime and performance
With multiple availability zones and autoscaling architecture, your experience will be smoother even during high-load periods. - EU-based hosting, fully GDPR-compliant
All personal data remain within the EU/EEA under strict data protection controls and audit readiness. - Better reliability for integrations
System traffic uses static IP addresses, which simplifies firewall configuration and ensures stable and predictable routing. - •Enhanced data resilience
With GCP, we retain backup data for up to one year and provide faster recovery options. - Improved file storage
Google Cloud Storage enables fast and reliable file uploads and access, fully integrated into our infrastructure. - Reliable Message Delivery and Platform Protection
Email delivery and platform security are supported by trusted providers—AWS (SES) and Cloudflare—enhancing the overall reliability and security of the infrastructure.
Processing & Security Measures with Google Cloud
- Data Location: Netherlands (europe-west4)
- Google Cloud Sub-processor list: Learn more
- DPA with GCP: Signed and part of our Master Agreement, fully GDPR-compliant
- Public GCP DPA: Learn more
- Risk and DPIA assessment: Conducted under GDPR Articles 32 & 35
- Security certifications: ISO 27001, 27017, 27018, 27701, SOC 2 Type II
- SCCs & safeguards: Commission Decision (EU) 2021/914 compliant, encryption and access control in place
🔐 How Google Cloud keeps your data secure
By using Google Cloud Platform, PeopleForce applies Google’s industry-recognized security and compliance infrastructure. Below are the key security measures that help protect customer data within our cloud environment:
- Data Encryption by Default
- All data is automatically encrypted at rest (AES‑256) and in transit (TLS/HTTPS).
- Internally, Google uses ALTS protocol to secure service-to-service communication.
Learn more
- Reliable Backup & Recovery
- Data backups are encrypted and stored securely, ensuring availability and fast recovery.
Learn more
- Data backups are encrypted and stored securely, ensuring availability and fast recovery.
- Advanced Key Management
- Multiple encryption key options: Google-managed, Customer-managed (CMEK), and externally managed (EKM/CSEK).
Key Management
- Multiple encryption key options: Google-managed, Customer-managed (CMEK), and externally managed (EKM/CSEK).
- Granular Access Controls
- Managed through Cloud IAM with least-privilege access, multi-factor authentication (MFA), and SSO support.
- Based on Google’s BeyondCorp Zero Trust model.
Access Controls
- Logging & Monitoring
- All activity is logged via Cloud Audit Logs.
- Real-time threat detection with Security Command Center.
- Google Access Transparency ensures visibility into any access by Google personnel.
Security Monitoring
- Secret Management
- Secrets like API keys and tokens are stored securely with auto-rotation and granular access rules.
Secret Manager
- Secrets like API keys and tokens are stored securely with auto-rotation and granular access rules.
- Network Isolation & Firewalling
- VPC Service Controls isolate services and prevent unauthorized data movement.
- Internal segmentation and Zero Trust applied to internal communications.
VPC Security
- Physical Security of Data Centers
- 24/7 surveillance, biometric controls, and multi-layered access protocols ensure physical safety.
Data Center Security
- 24/7 surveillance, biometric controls, and multi-layered access protocols ensure physical safety.
- Global Compliance Standards
- Certified for GDPR, ISO 27001/17/18/27701, SOC 2, PCI DSS, and others.
- Regular audits and tools to help us stay compliant.
GCP Compliance Center
🛡 What does this mean for you?
The use of Google Cloud Platform ensures a stable and high level of personal data protection in accordance with GDPR requirements and our applicable contractual obligations. Data processing is carried out within the EU in line with security and confidentiality principles.For information security and compliance inquiries, please contact: