Reboot your Startup with our technical guided series

At Google Cloud, we want to provide you with the access to all the tools you need to grow your business. Through the Google Cloud Technical Guides for Startups, leverage industry leading solutions with how-to video guides and resources curated for startups. 

This multi-series contains 3 chapters: Start, Build and Grow, which matches your startup’s  journey:

• The Start Series: Begin by building, deploying and managing new applications on Google Cloud from start to finish.
• The Build Series: Optimize and scale existing deployments to reach your target audiences.
• The Grow Series: Grow and attain scale with deployments on Google Cloud.

Additionally, at Google we have the Google for Startups Cloud Program, which is designed to help your business get off the ground and enable a sustainable growth plan for the future. The start of the Build Series delineates the benefits of the program, the application process, and more to help your business get started on Google Cloud.

A quick recap of the Build Series

Once you have applied for the Google for Startups Cloud Program, there’s so much to explore and try out on Google Cloud. 

Figuring out a rapid but solid application development process can be key to many businesses in reducing time to market. Furthermore, learning what database to use to handle application data can be tricky. Deep dive into our Firestore video which walks through how Firestore can help you unlock application innovation with simplicity and speed.

We then move on to a deep dive into BigQuery and how it can help businesses. BigQuery is designed to support analysis over petabytes of data regardless of whether it’s structured or unstructured. This video is the goto video for getting started on BigQuery!If you are someone looking to run your Spark and Hadoop jobs faster and on the cloud, look to Dataproc. To learn more about Dataproc and how this has helped other customers with their Hadoop clusters, click the video below to learn all things Dataproc related.

Next, we find out what Dataflow can bring to your business; some advantages, sample architectures, demos on the console, and how other customers are using Dataflow. 

We also talked about Machine Learning, starting from selecting the right ML solution to Machine Learning APIs on cloud to exploring Vertex AI. Following that we look into API management in Google Cloud and how Apigee helps operate your APIs with enhanced scale, security, and automation.

We ended the series with the last two episodes focusing around security deep-dive and using Cloud Tasks and Cloud Scheduler.

Coming up next – The Grow Series

Dive into the next chapter of this multi-series, with our upcoming Grow Series, where we will be focusing on growing and attaining scale with deployments on Google Cloud.

Check out our website and join us by checking out the video series on the Google Cloud Tech channel, and subscribe to stay up to date. 

See you in the cloud!

All over the world, businesses, schools and users depend on G Suite to help them stay connected and get work done. Google designs, builds, and operates our products on a secure foundation, aimed at thwarting attacks and providing the protections needed to keep you safe. G Suite and Google Meet are no exception.

Google Meet’s security controls are turned on by default, so that in most cases, organizations and users won’t have to do a thing to ensure the right protections are in place. Here, we’ll summarize the key capabilities of Google Meet that help protect you.

Proactive protections to combat abuse and block hijacking attempts

Google Meet employs an array of counter-abuse protections to keep your meetings safe. These include anti-hijacking measures for both web meetings and dial-ins. 

Google Meet makes it difficult to programatically brute force meeting IDs (this is when a malicious individual attempts to guess the ID of a meeting and make an unauthorized attempt to join it) by using codes that are 10 characters long, with 25 characters in the set. We limit the ability of external participants to join a meeting more than 15 minutes in advance, reducing the window in which a brute force attack can even be attempted. External participants cannot join meetings unless they’re on the calendar invite or have been invited by in-domain participants. Otherwise, they must request to join the meeting, and their request must be accepted by a member of the host organization. 

In addition, we’re rolling out several features to help schools keep meetings safe and improve the remote learning experiences for teachers and students, including:

• Only meeting creators and calendar owners can mute or remove other participants. This ensures that instructors can’t be removed or muted by student participants.
• Only meeting creators and calendar owners can approve requests to join made by external participants. This means that students can’t allow external participants to join via video, and that external participants can’t join before the instructor.
• Meeting participants can’t rejoin nicknamed meetings once the final participant has left. This means if the instructor is the last person to leave a nicknamed meeting, students can’t join later without the instructor present.

Secure deployment and access controls for admins and end-users

To limit the attack surface and eliminate the need to push out frequent security patches, Google Meet works entirely in your browser. This means we do not require or ask for any plugins or software to be installed if you use Chrome, Firefox, Safari, or Microsoft Edge. On mobile, we recommend that you install the Google Meet app. 

To help ensure that only authorized users administer and access Meet services, we support multiple 2-Step Verification options for accounts that are secure and convenient. These include hardware and phone-based security keys and Google prompt. Additionally, Google Meet users can enroll their account in our Advanced Protection Program (APP), which provides our strongest protections available against phishing and account hijacking and is specifically designed for the highest-risk accounts. 

For G Suite Enterprise and G Suite for Education customers, we offer Access Transparency, which logs any Google access to Google Meet recordings stored in Drive, along with the reason for the access (support team actions that you might have requested, for example). Customers can also use data regions functionality to store select/covered data of Google Meet recordings in specific regions (i.e. US or Europe). 

Secure, compliant, and reliable meeting infrastructure 

In Google Meet, all data is encrypted in transit by default between the client and Google for video meetings on a web browser, on the Android and iOS apps, and in meeting rooms with Google meeting room hardware. Meet adheres to IETF security standards for Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). For every person and for every meeting, Meet generates a unique encryption key, which only lives as long as the meeting, is never stored to disk, and is transmitted in an encrypted and secured RPC (remote procedure call) during the meeting setup.

Security is an integral part of all our operations at Google. Our team of full-time security and privacy professionals supports our software engineering and operations to ensure that security is always a part of how we build and run our services. All of our Google Cloud and G Suite customers benefit from these capabilities, including: 

• Secure-by-design infrastructure: Google Meet benefits from Google Cloud’s  defense-in-depth approach to security, which utilizes the built-in protections and global-private network that Google uses to secure your information and safeguard your privacy.
• Compliance certifications: Our Google Cloud products, including Google Meet, regularly undergo independent verification of their security, privacy, and compliance controls, including validation against standards such as SOC, ISO/IEC 27001/17/18, HITRUST, and FedRAMP. We support your compliance requirements around regulations such as GDPR and HIPAA, as well as COPPA and FERPA for education. 
• Incident management: We have a rigorous process for managing data and security incidents that specifies actions, escalations, mitigation, resolution, and notification of any potential incidents impacting customer data.
• Reliability: Google’s network is engineered to accommodate peak demand and handle future growth. Our network is resilient and engineered to accommodate the increased activity we’ve seen on Google Meet.
• Transparency: At Google Cloud, we’re clear about our commitments regarding customer data: we process customer data according to your instructions; we never use customer data for advertising purposes; and we publish the locations of our Google data centers, which are highly available, resilient, and secure.  

During COVID-19 and beyond, we will continue to protect Google Meet users and their data, and keep innovating with new features to make our tools helpful, secure, and safe.

European organizations are moving their operations and data to the cloud in increasing numbers to enable collaboration, drive business value, and transition to hybrid work. However, the cloud solutions that underpin these powerful capabilities must meet an organization’s critical requirements for security, privacy, and digital sovereignty. We often hear from European Union policymakers and business leaders that ensuring the sovereignty of their cloud data, through regionalization and additional controls over administrative access, is crucial in this evolving landscape.

Today, we’re announcing Sovereign Controls for Google Workspace, which will provide digital sovereignty capabilities for organizations, both in the public and private sector, to control, limit, and monitor transfers of data to and from the EU starting at the end of 2022, with additional capabilities delivered throughout 2023. This commitment builds on our existing Client-side encryption, Data regions, and Access Controls capabilities.

Offering enhanced customer controls, including Client-side encryption

Encryption is an important technical control that limits a cloud provider’s access to customer data. Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. The European Data Protection Board recommendations include encryption as part of the supplementary measures to protect data. Google Workspace is leading the way on such measures with our Client-side encryption feature that allows customers to continue benefiting from the powerful innovations of Google Cloud while retaining complete confidentiality and control over their data.

Google Workspace’s unique approach to client-side encryption provides our customers with authoritative privacy control over their data through encryption keys that they can hold on site, within a nation’s borders, or within any other boundary they define. Google never has access to the keys or key holders, which means the data is indecipherable to us and we have no technical ability to access it. We deliver this level of encryption without the need for legacy desktop clients, while maintaining the same high-quality experience for your users such as online co-authoring.

Organizations can choose to use Client-side encryption pervasively across all their users, or create rules that apply to specific users, organizational units, or shared drives. Client-side encryption is now generally available for Google Drive, Docs, Sheets, and Slides, with plans to extend the functionality to Gmail, Google Calendar, and Meet by the end of 2022.

Expanding data location controls

Data regions already allow our customers to control the storage location of their covered data at-rest. We will enhance this capability by the end of 2023 through expanded coverage of data storage and processing in-region along with an in-country copy.

As employees and organizations adopt new ways of working in a hybrid world, they need secure access to data to drive key business outcomes. But this trend, combined with complex technical architectures, presents significant challenges to retaining control over where data resides.

Our cloud-native architecture means that Google Workspace functions fully within a browser, without requiring caches or installed software on employee devices. We adopt a zero-trust approach, with built-in security that provides controls to geo-fence devices and users through Context Aware Access. Moreover, admins can set sharing boundaries and define rules that govern user communication.

In short, we empower admins with critical capabilities that can give them granular control over the flow of their data without hindering the modern collaboration capabilities that form the foundation of Google Workspace. We are enabling organizations to strike the right balance between data location and collaboration across teams, partners, and customers.

Control and transparency for administrative access

When moving to a cloud-based service, organizations need greater visibility and control over all forms of administrative access to their systems, including who has access, the nature and circumstances of that access, and the ability to specify that only certain personnel—in designated countries or regions—have access. These capabilities are core to our approach for meeting evolving digital sovereignty standards.

Building on this approach, we will implement a series of new Access Controls by the end of 2023 that will enable customers to:

• Restrict and/or approve Google support access through Access Approvals.
• Limit customer support to EU-based support staff through Access Management.
• Ensure round-the-clock support from Google Engineering staff, when needed, with remote-in virtual desktop infrastructure .
• Generate comprehensive log reports on data access and actions through Access Transparency, which is already available in GA.

Sovereign Controls for Google Workspace will deliver digital sovereignty through a comprehensive set of capabilities for organizations working in and across EU regions. In parallel, Google Cloud will continue to provide customers with legal mechanisms for international data transfer, which will include making the protections offered by the new EU data transfer framework available once it is implemented.

We remain committed to equipping our customers in Europe and across the globe with powerful technical solutions that help them adapt to, and stay on top of, a rapidly evolving regulatory landscape. We’ve designed and built Google Workspace to operate on a secure foundation, providing capabilities to keep our users safe, their data secure, and their information private. Digital sovereignty is core to our ongoing mission in Europe and elsewhere, and a guiding principle that customers can rely on now and into the future.

Launched in 2013, Canva is a free online design platform with a mission to empower everyone in the world to design. Featuring a simple drag-and-drop user interface and a vast range of templates ranging from presentations, social media graphics, posters, apparel to videos, plus a huge library of fonts, stock photography, illustrations, video footage and audio clips, anyone can take an idea and create something beautiful. The Canva team is located across the globe with offices in the United States, China, the Philippines and Australia.

A long-term user

“To empower our team to undertake deep work, we have a recurring weekly Calendar invitation that keeps an entire day free of meetings across the business.” – Jeff Lai, Internal Infrastructure Specialist, Canva

A business that enables collaboration, innovation, and creativity is a natural fit for Google Workspace, an integrated suite of secure, cloud-native collaboration and productivity applications. Canva is a long-term user of the application suite and Jeff Lai, Internal Infrastructure Specialist, says “being a global business from day one, the company wanted to ensure any technology we used would be able to grow and scale with us.

“Google Workspace certainly met the brief. For example, creating new Google Workspace instances is very easy, you simply connect them to your domain and away you go.”

Canva has 1,850 Google Workspace licenses to cover its approximately 1,200-strong workforce, plus service accounts and shared accounts. The application suite covers the organization’s communication, connectivity and productivity needs, with enough storage to enable the business not to have to pay for supplementary storage services or deploy storage in-house. Canva’s team of designers, developers, marketers, investors and advisers uses Google Workspace for tasks such as scheduling meetings, emailing and chatting to internal and external parties, storing files and tracking activity on spreadsheets.

“Google Workspace is like air and water to us,” says Jeff. “it is part of the natural environment of our workplace.”

Reviewing licensing

With Google Workspace enabling Canva’s global workforce model, the business is exploring ways of further leveraging the features available through the application suite; Jeff reveals Canva is exploring the use of enterprise-class licenses that provide additional reporting and auditing capabilities.

Near-100% availability

“We expect Google Workspace to continue to play a key role in our operations and in supporting an increasingly international workforce.” – Jeff Lai, Internal Infrastructure Specialist, Canva

Supporting a distributed model with an increasing number of employees based outside Australia also requires Canva to use collaboration and productivity tools available 24 hours a day, seven days a week.

Google Workspace applications help the business drive continuous improvement from the bottom up, as well as the top down. Canva uses Forms to capture — in what Jeff describes as ‘no-judgement’ fashion — new ideas, callouts of broken processes, or areas of improvement. These comments and suggestions go directly to founders and senior management for action.

Furthermore, Google Workspace enables Canva to run a continuously productive working environment. “To empower our team to undertake deep work, we have a recurring weekly Calendar invitation that keeps an entire day free of meetings across the business,” says Jeff.

Growth example of ‘new normal’

Canva’s team believes the organization’s accelerated growth is indicative of the ‘new normal’, as more teams realize the need for a more scalable, more collaborative, more affordable and more user-friendly design platform.

Organizations of all sizes are doubling down on building a reliable remote workplace, and are turning to modern productivity and collaboration platforms like Canva to ensure they remain flexible and scalable.

Google Workspace and other Google Cloud products and services also enable Canva to increase the value of its own platform. The business uses Translation API to translate non-English searches into English, allowing it to display appropriate images and other elements.

Furthermore, the Canva editing tool enables users to pull files from Drive to be refined, while the platform also integrates with Google Maps and YouTube to give end users the ability to easily create items such as online brochures with these products integrated into them. Finally, Canva for Education — a tailored product to support student learning — integrates with Google Classroom, helping educators efficiently manage progress and connect with students at school, from home or on the go.

With Google Workspace, Canva is ideally positioned to continue growing its user base and build on the success of a platform that has thousands of templates and fonts, and millions of stock photos, icons and illustrations. Jeff says the business remains focused on the same goal as its founders had right at the start — making design accessible to everyone. “We expect Google Workspace to continue to play a key role in our operations and in supporting an increasingly international workforce,” he says.

At Cardinal Group, we have four distinct lines of business, each of which are critical to our overall company performance: real estate investment, third-party property management, construction management, and marketing.

As the VP of IT and Data, one of my top priorities is giving each of our team members across these teams the tools they need to be productive, while also ensuring all of our company’s data is safe, secure, and properly managed. And with a variety of different business units, it’s critical that our team members are able to collaborate effectively across teams. We rely heavily on Google Drive and G Suite to help us accomplish these goals.

Prior to partnering with Google, we relied on a legacy content storage and management solution. Our team members found this tool cumbersome and unintuitive—finding the right file at the right time was very difficult, and it was challenging to collaborate and share content effectively across the various teams within our company.

We also struggled with document ownership and version control. One team would start working on a contract, and then share it with a collaborator over email, who would then share it with a third collaborator, and so on. It was never clear which version of the document was the most up to date, who owned it, and who should be working on it. Our team members relied on these tools every day to get their jobs done, and the subpar experience was impacting productivity and morale. 

Moving toward a more collaborative company culture

We began to explore various solutions to these problems, and quickly realized that Google’s approach to productivity was most closely aligned with Cardinal Group’s desire to build a more collaborative and innovative culture. We worked closely with Cloudbakers, a Google partner, to migrate all of our existing content and data to Drive.

And most of our team members were already familiar with Drive and found it very intuitive and easy to use, so change management was minimal and we were quickly up and running. 

With Drive, it’s easy for our team members to quickly find and access the files they need at that moment, which saves them valuable time and increases productivity across our teams. Live, real-time collaboration across Drive and our other G Suite apps is a huge selling point for us.

For example, if we’re building a marketing plan, our onsite, marketing, and operations teams can all work simultaneously on the same plan, which saves us a ton of time and also eliminates version control and ownership issues. We’re also moving towards a “work from anywhere” model, and Drive is a huge enabler of this transition, with team members able to easily access and collaborate on files, whether they’re working in our main office, at home, or at a customer’s community. 

Fewer support tickets lets IT spend time on more impactful projects

Since we started working with Google a few years ago, our company has grown significantly, from 800 to 1,400 team members. During this tremendous growth, the number of productivity-related support tickets we see has remained flat; this translates to a 43% decline in the number of support tickets per team member. As a result, our team members can spend more time being productive and my IT team can focus less on resolving support tickets and more on creating business value for Cardinal Group and our team members. 

Moving to Google Drive and G Suite has been a big part of our journey towards being a more collaborative and innovative company. We’re looking forward to continuing this partnership with Google and we’re excited to see what’s next!