Google Enables E2EE for Workspace With Assured Controls

Google has enabled end-to-end encrypted email from the Gmail client to any email address for Google Workspace Enterprise Plus customers who use client-side encryption and the Assured Controls add-on. The feature encrypts message bodies, attachments and images on the client with customer-controlled keys before data reaches Google's servers, though subject lines and recipients (headers) remain unencrypted. Non‑Gmail recipients receive a notification and open encrypted content in a restricted portal by signing in or verifying a code, accessing the message via a temporary guest Google Workspace account—avoiding S/MIME certificate exchanges or third‑party software. Admins must enable the capability (it’s off by default), and Google began rolling it out around Sept. 30–Oct. 2, with deployments taking up to roughly two weeks to reach eligible users. Google says the change reduces IT complexity while helping enterprises meet data‑sovereignty and compliance requirements through enhanced privacy and security controls.