Google Vertex AI (Gemini Enterprise Agent Platform)
From AI API data terms: training, retention and zero retention: What does each AI provider say happens to data sent to its commercial API: is it used for training, how long is it kept, and can zero retention be had?
Provider: Google
The company offering the API, as named on its own page.
Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Checked by a second reader.
Offering: Gemini Enterprise Agent Platform
The API, tier or platform the row covers, in the provider's words.
Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Checked by a second reader.
Trains on API data by default: No
True or false only where the text plainly says what happens to this offering's API data with no opt-in or opt-out by the customer. An opt-out with no stated default is left blank. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Google won't use your data to train or fine-tune any AI/ML models without your prior permission or instruction. This applies to all managed models on Gemini Enterprise Agent Platform, including GA and pre-GA models.
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Checked by a second reader.
Default retention: Customer data is retained for limited periods of time in the following scenarios and conditions
How long prompts and outputs are kept by default, in the provider's words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts. A page that's only less specific isn't a conflict: the more specific statement is the value.
Customer data is retained in Gemini Enterprise Agent Platform for Models as a Service (MaaS) for limited periods of time in the following scenarios and conditions.
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Read once.
Exceptions: Models designated as "advanced AI": all prompts and responses will be logged and securely stored for up to 30 days
The main case with different retention, in the provider's words: first a model carved out of the general promise, then a feature, then a case such as flagged content. Pages rank as for Default retention; between pages of equal rank, the one naming the models. One passage only, so others may exist.
Google Cloud has implemented a more rigorous abuse monitoring system for models designated as "Advanced AI". Prompt and response logging: All prompts and responses will be logged and securely stored for up to 30 days for the sole purpose of monitoring for abuse.
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/learn/abuse-monitoring. Read 2026-11-01. Checked by a second reader.
Zero retention offered: Yes
True only where the provider plainly offers zero data retention by that name for this offering; false only where it plainly excludes it. A similar control under another name is left blank here and described in How to get it.
To achieve zero data retention, customers must take specific actions within each of these areas:
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Checked by a second reader.
How to get it: Customers must take specific actions within each of these areas
What the provider says is needed for zero retention. Where it has no offer by that name, its nearest named control or pointer, in its own words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
To achieve zero data retention, customers must take specific actions within each of these areas:
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/data-governance. Read 2026-11-01. Checked by a second reader.
BAA available: Yes
True where the provider says it signs or offers a HIPAA Business Associate Agreement, or sets terms for use under one, for this offering. A general cloud BAA that the page doesn't tie to this offering, or an invitation to ask, is left blank.
Gemini Enterprise Gemini Enterprise Agent Platform Gemini Enterprise for Customer Experience
Source: https://cloud.google.com/security/compliance/hipaa. Read 2026-11-01. Checked by a second reader.
Data location: Data stored at rest in the customer selected location remains at rest in that location. Requests submitted to a global endpoint may be processed in any Google Cloud location around the world
Where the provider states data is processed or stored, in its words. Where pages differ: legal or privacy page first, then help or trust pages, then developer docs, with the other in conflicts.
Data stored at rest in the customer selected location remains at rest in that location, independent of the Gemini Enterprise Agent Platform endpoint called by that customer's request. Global endpoints are listed on the Deployments and endpoints page. Requests submitted to a global endpoint may be processed in any Google Cloud location around the world
Source: https://docs.cloud.google.com/vertex-ai/generative-ai/docs/learn/data-residency. Read 2026-11-01. Checked by a second reader.