Google Agent Identity

Google Cloud

Vendor

SPIFFE-based cryptographic identity for agents on Gemini Enterprise Agent Platform, usable as an IAM principal with auto-rotated certs.

Curated by Tiberiu ArvaVerified

Proprietary

Strengths

  • SPIFFE IDs as IAM principals
  • Auto-rotated 24-hour X.509 certificates
  • Works with VPC-SC and PAB

Practitioner note

Natural choice for agents on Agent Runtime, Gemini Enterprise or Cloud Run; identities are scoped to Google Cloud, so cross-cloud agents still need a broker or federation.

Governance posture

Reviewed 2026-09-30
UnknownData residency

Agent Identity overview does not state data residency; governed by the hosting Google Cloud resource location.

YesDeployment model

Managed Google Cloud service for Agent Runtime, Gemini Enterprise and Cloud Run agents. (saas)

Source
YesAudit logging

Audit logs record actions both when the agent acts as itself and on behalf of an end user.

Source
YesSOC 2

Gemini Enterprise Agent Platform and IAM are in scope for Google Cloud SOC 1/2/3 reports.

Source
YesISO 27001

Gemini Enterprise Agent Platform and IAM are in scope for ISO 27001/27017/27018.

Source
UnknownISO 42001

Google Cloud ISO/IEC 42001 service scope could not be confirmed for Agent Identity.

N/AEU AI Act

Identity and access-control tooling for agents, not itself an AI system placed on the market; AI Act obligations rest with the provider/deployer of the governed agents. (role: not-applicable)

YesLicense risk

Proprietary Google Cloud service; identities tied to Google Cloud IAM. (medium)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-08-23

Source-backed information mapped from Google Agent Identity's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.