Google Agent Identity
Google Cloud
SPIFFE-based cryptographic identity for agents on Gemini Enterprise Agent Platform, usable as an IAM principal with auto-rotated certs.
Curated by Tiberiu ArvaVerified
Strengths
- SPIFFE IDs as IAM principals
- Auto-rotated 24-hour X.509 certificates
- Works with VPC-SC and PAB
Practitioner note
Natural choice for agents on Agent Runtime, Gemini Enterprise or Cloud Run; identities are scoped to Google Cloud, so cross-cloud agents still need a broker or federation.
Governance posture
Reviewed 2026-09-30Agent Identity overview does not state data residency; governed by the hosting Google Cloud resource location.
Managed Google Cloud service for Agent Runtime, Gemini Enterprise and Cloud Run agents. (saas)
SourceAudit logs record actions both when the agent acts as itself and on behalf of an end user.
SourceGemini Enterprise Agent Platform and IAM are in scope for Google Cloud SOC 1/2/3 reports.
SourceGemini Enterprise Agent Platform and IAM are in scope for ISO 27001/27017/27018.
SourceGoogle Cloud ISO/IEC 42001 service scope could not be confirmed for Agent Identity.
Identity and access-control tooling for agents, not itself an AI system placed on the market; AI Act obligations rest with the provider/deployer of the governed agents. (role: not-applicable)
Proprietary Google Cloud service; identities tied to Google Cloud IAM. (medium)
SourceEU AI Act obligations
Risk tier: Not applicable · as of 2026-08-23Source-backed information mapped from Google Agent Identity's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.
This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.
Explore the category
Compare this tool against the rest of its category and the cloud platform foundation layer.
Return to the category grid to compare governance posture across every tracked tool.
Review Microsoft Foundry, Amazon Bedrock, and Gemini Enterprise Agent Platform as the foundation layer.
Track releases, deprecations, license changes, and other market movements.