Skip to main content
ShadowAI Defense GitHub
← All services

Google · Conversational AI

Gemini

Allow Enterprise Enterprise tier: Available DPA: Yes

Network signatures

Domains: gemini.google.com, bard.google.com, aistudio.google.com

API endpoints: generativelanguage.googleapis.com, us-central1-aiplatform.googleapis.com

SNI patterns: *.googleapis.com, *.gemini.google.com

Client signatures

Mobile apps: Gemini Android

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 4
  • Output quality (hallucination / legal): 3
  • Integration risk (OAuth, extensions, agentic): 4

Data egress concerns

  • Workspace document content
  • Customer data
  • Code
  • Email contents

Training-use default

Consumer Gemini: conversations may be reviewed and used to improve services unless turned off. Workspace tier: customer data not used to train generally-available models per contractual terms.

Applicable detection rules

References