Google Announces Full Availability of Client-Side Encryption for Google Sheets

Google has announced the full general availability of client-side encryption (CSE) for Google Sheets. This significant upgrade gives organizations direct control over encryption keys and enhances data confidentiality within Google Workspace.

This move extends robust security features to spreadsheets, ensuring that sensitive data remains unreadable to Google, and addresses critical compliance and data portability needs for enterprise customers.

The update brings a comprehensive suite of features to encrypted spreadsheets. Users can now import, export, and decrypt client-side encrypted files directly within Sheets.

A significant highlight is the introduction of full interoperability with Microsoft Office formats; users can work with encrypted Excel files using Office editing mode and perform client-side conversions of Google Sheets to the Excel format.

This ensures seamless workflows for organizations that operate in hybrid software environments. Furthermore, the integration with Google Vault and Takeout allows for the secure export of encrypted files, supporting eDiscovery and data portability mandates without compromising security.

This enhancement is a direct response to the growing demand for stricter data governance and compliance in the enterprise sector. By placing encryption keys in the hands of the client, Google empowers organizations to meet rigorous industry standards.

Client-Side Encryption for Google Sheets

With CSE, the content of a file is encrypted in the user’s browser before any data is transmitted or stored in Google’s cloud storage.

This means that neither Google nor any third-party service provider can access the encrypted content, providing an essential layer of protection for financial data, personally identifiable information (PII), and other confidential business intelligence stored in spreadsheets.

For administrators, the feature is enabled by default for organizations that already have client-side encryption configured and can be managed at the organizational unit (OU) level.

Google provides dedicated tools to support these new capabilities, including a data export tool for Vault, a decrypter tool for offline file access, and a converter tool to change exported Google Sheets files into Microsoft Office formats.

For end-users, the experience is designed to be intuitive. They can convert an existing spreadsheet into an encrypted file by simply using the ‘Make a Copy’ option and selecting encryption.

The rollout for this feature began on September 4, 2025, for Rapid Release domains and will commence on September 18, 2025, for Scheduled Release domains, with a gradual release of up to 15 days for full visibility.

This advanced security feature is available to Google Workspace Enterprise Plus, Education Standard, and Plus, and Frontline Plus customers, solidifying Google’s commitment to providing secure, enterprise-grade collaboration tools.

Free live webinar on new malware tactics from our analysts! Learn advanced detection techniques -> Register for Free