Security controls for Generative AI
Vertex AI implements Google Cloud security controls to help secure yourmodels and training data.
The following table lists the security controls available for Generative AI features:
| Data residency (at rest) | Customer-managed encryption keys (CMEK) | VPC Service Controls (VPC-SC) | Access Transparency (AXT) | |
|---|---|---|---|---|
| Gemini 2.5 Pro | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| Context caching | ||||
| RAG Engine | ||||
| Grounding with Google Search and Grounding with Google Maps | ||||
| Gemini 2.5 Flash Image | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Gemini 2.5 Flash | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| Context caching | ||||
| RAG Engine | ||||
| Grounding with Google Search and Grounding with Google Maps | ||||
| Gemini 2.5 Flash-Lite | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| Context caching | ||||
| RAG Engine | ||||
| Grounding with Google Search and Grounding with Google Maps | ||||
| Gemini 2.5 Flash with Gemini Live API native audio | ||||
| Online prediction | ||||
| Gemini 2.0 Flash | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| Context caching | ||||
| RAG Engine | ||||
| Grounding with Google Search and Grounding with Google Maps | ||||
| Gemini 2.0 Flash-Lite | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| RAG Engine | ||||
| Context caching | ||||
| Grounding with Google Search and Grounding with Google Maps | ||||
| Embeddings for Multimodal | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| Embeddings for Text | ||||
| Online prediction | ||||
| Batch prediction | ||||
| Tuning | ||||
| RAG Engine | ||||
| Imagen for Image Generation | ||||
| Online prediction | ||||
| Tuning | ||||
| Veo for Video Generation | ||||
| Online prediction | ||||
| Partner and Open Models (MaaS) | ||||
| Online prediction | ||||
Prompt logging for Partner and Open Models (MaaS) is turned off by default and adheres to theVertex AI Zero Data Retention policy.
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-02-19 UTC.