Google Model Armor

Google

Vendor

Model-agnostic prompt and response safety screening layer across Google enterprise infrastructure.

Curated by Tiberiu ArvaStale

Proprietary

Strengths

  • Model-agnostic screening
  • Google security integration
  • Enterprise API fit

Practitioner note

Worth evaluating for Google-first estates that need managed prompt and response protection, especially around injection and unsafe content controls.

Where it sits in the stack

Listed under Guardrails & security in the Control plane layer.

  1. Build & orchestrate
  2. Control plane
  3. Use

Governance posture

Reviewed 2026-05-26
PartialData residency

US/EU regional endpoints; in-memory processing without durable retention unless logging enabled.

Source
YesDeployment model

Stateless cloud-native SaaS via regional API; standalone or with Security Command Center. (saas)

Source
YesAudit logging

Audit logs via Cloud Logging filtering on modelarmor.googleapis.com.

Source
YesSOC 2

Runs on SOC 2 Type II Google Cloud infrastructure.

Source
YesISO 27001

Runs on ISO/IEC 27001-certified Google Cloud infrastructure.

Source
UnknownISO 42001

Model Armor not confirmed in Google Cloud ISO 42001 scope as of 2026-05.

N/AEU AI Act

Prompt/response screening component; supports operators' compliance, not itself high-risk. (role: not-applicable)

YesLicense risk

Proprietary GCP SaaS; full dependency on GCP. (medium)

Source

EU AI Act obligations

Risk tier: Not applicable · as of 2026-10-10

Source-backed information mapped from Google Model Armor's tracked risk tier — not legal advice. Obligations depend on how your organisation deploys the system; see the full obligation reference and timeline.

This record's EU AI Act risk tier is marked not applicable, so no tier-specific obligations attach. Deployers embedding it in an AI system in scope of the Act should assess that system's own tier.

Change history

Source-backed and auto-detected events for this tool, newest first.

  1. Feature

    Model Armor improved prompt-injection and jailbreak protection for Workspace data such as emails, docs and files, on US and EU multi-region endpoints with filter version v3 or later.

    Model Armor release notes

See Google Model Armor read column-by-column against the tools enterprise teams most often evaluate it against.

Explore the category

Compare this tool against the rest of its category and the cloud platform foundation layer.