Abuse monitoring

Google models not designated as "Google Frontier Models" or "Advanced AI"

As outlined in Section 4.3 "Generative AI Safety and Abuse" of Google Cloud Platform Terms of Service, Google uses the following process to detect potential abuse and violations of its Acceptable Use Policy and Prohibited Use Policy as part of providing Generative AI Services to customers.

  • Automated detection: Google uses automated safety classifiers to detect potential abuse and violations.

  • Prompt logging and human review: If automated safety classifiers detect suspicious activity that requires further investigation into whether a customer has violated our policies, then Google may log customer prompts solely for the purpose of examining whether a violation of the AUP or Prohibited Use Policy has occurred. This data won't be used to train or fine-tune any AI/ML models. This data is stored securely for up to 90 days in the same region or multi-region selected by the customer for their project and adheres to Cloud de Confiance by S3NS assurances, such as Data Residency, Access Transparency and VPC Service Controls. Prompt logs for the purposes of abuse monitoring are not encrypted by Customer-managed encryption keys (CMEK).

    • Action: Authorized Google employees may assess the flagged prompts and may reach out to the customer for clarification. Failure to address the behavior—or recurring or severe abuse—may result in suspension or termination of the customer's access to Gemini Enterprise Agent Platform or Cloud de Confiance by S3NS services.

    • Services in scope: Google's Generative AI Services.

    • Customers in scope: Only customers whose use of Cloud de Confiance by S3NS is governed by the Google Cloud Platform Terms of Service. This means that customers with a Cloud de Confiance by S3NS Master Agreement are exempt from prompt logging for this abuse monitoring by default.

Google Frontier Models

As outlined in Section 34 of the Service Specific Terms, "Google Frontier Models," Google uses the following process to detect potential abuse and violations of its agreements, including the Acceptable Use Policy and Prohibited Use Policy, as part of providing Generative AI Services to customers.

  • Prompt and response logging for abuse monitoring: Google may log customer prompts and responses solely for ensuring safe use of the Google Frontier Models and compliance with customer's Google agreement ("Purpose" set forth in the Service Specific Terms). This includes automated processing to create anonymized shingles and analyze usage patterns solely for the purpose described above. This data won't be used to train or fine-tune any AI/ML models. These logs are stored securely inside the customer's environment for up to 30 days. Prompt logs for the purposes of abuse monitoring are not encrypted by Customer-managed encryption keys (CMEK). Customers are not charged for this logging.

  • ZDR-aligned abuse logging for customers with Cloud Master Agreements: Section 34 "Google Frontier Models" of Service Specific Terms does not give Google the right to conduct human review. Consequently, these logs adhere to ZDR standards for customers with Cloud Master Agreements, as they are stored inside the customer's environment and exempt from human review.

  • Human review of abuse logs for customers covered under Cloud de Confiance by S3NS online terms: As outlined in Section 4.3 "Generative AI Safety and Abuse" of Google Cloud Platform Terms of Service, Google may additionally conduct human review of prompts flagged by our abuse classifiers, solely for the purpose of determining whether a violation of the AUP or Prohibited Use Policy has occurred. This data won't be used to train or fine-tune any AI/ML models. Only customers whose use of Cloud de Confiance by S3NS is governed by the Google Cloud Platform Terms of Service are in scope for human review. This means that customers with a Cloud de Confiance by S3NS Master Agreement are exempt from human review for this abuse monitoring by default.

  • Models in scope: Gemini 4 Argon (Cyber Permissive)

  • Services in scope: Google's Generative AI Services.

Non-Google Advanced AI models

As outlined in the Advanced AI Safety Addendum, Cloud de Confiance by S3NS has implemented a more rigorous abuse monitoring system for models designated as "Advanced AI".

  • Prompt and response logging: All prompts and responses will be logged and securely stored for up to 30 days for the sole purpose of monitoring for abuse. This data won't be used to train or fine-tune any AI/ML models. This data is stored in the same region or multi-region selected by the customer for their project and adheres to Cloud de Confiance by S3NS assurances, such as Data Residency, Access Transparency and VPC Service Controls. Prompt and response logs for the purposes of abuse monitoring are not encrypted by Customer-managed encryption keys (CMEK). It may not be possible to opt-out of prompt-response logging when using some Advanced AI features. Please contact your account team for clarification.

  • Automated investigation: Google deploys automated investigative tools, including safety classifiers, to analyze logged data and detect potential abuse and violations.

  • Action: Authorized Google employees may assess the flagged prompts and may reach out to the customer for clarification. Failure to address the behavior—or recurring or severe abuse—may result in suspension or termination of the customer's access to Gemini Enterprise Agent Platform or Cloud de Confiance by S3NS services.

  • Services in scope: Models and features designated as "Advanced AI", including:

    • Claude Mythos (all versions)
    • Claude Fable (all versions)
    • Claude Opus >=4.7 and Sonnet >=5 when advanced_ai_enabled is set to true for use within Anthropic's Cyber Verification Program (CVP). All other usage of these models is out of scope of the Advanced AI Safety Addendum. To enroll and enable CVP for Claude models, see Cyber Verification Program for Claude.

  • Customer opt-out: Zero data retention may not be possible when using some Advanced AI features. Please contact your account team for clarification. See the following section on how to govern acceptance of the addendum.

Consent to the Advanced AI Safety Addendum is required once per project before Advanced AI models can be enabled in that project. Consent is performed in Model Garden through the Cloud de Confiance console before enabling any Advanced AI model.

Consenting users must acknowledge that they are acting on behalf of their organization and possess the requisite authority to bind the customer to the obligations of the addendum. In order to consent, a user must have the aiplatform.consents.update permission which is included in the aiplatform.admin role.

Govern the Advanced AI Safety Addendum

To prevent your users from consenting to this addendum admins can:

Partner-specific terms

Use of partner models on Gemini Enterprise Agent Platform is subject to partner-specific terms.

Anthropic

Use of Anthropic models on Gemini Enterprise Agent Platform is governed by Anthropic's Commercial Terms of Service or other applicable agreement with Anthropic, with use of Anthropic Advanced AI governed by Section F of Anthropic's Service Specific Terms. The abuse monitoring systems described on this page are used to ensure adherence to these terms.

Data retention

For Anthropic Claude Fable 5 on Google Cloud and Mythos 5, prompts and responses are retained for up to 30 days. To use Claude Fable 5 on Google Cloud and Mythos 5, as required by Anthropic, you must enable sharing this data with Anthropic for abuse monitoring.

What's next