Google Docs
Collaborative document editing. Free with a Google account. Google can access your content.
What should journalists know about Google Docs?
Google Docs is the default collaborative writing tool for most newsrooms, and for everyday editorial work it earns that position. Real-time editing, commenting, version history, and near-universal access. AES-256 encryption at rest, TLS in transit. But Google is not zero-knowledge — Google employees and systems can access your document content for service operation, abuse detection, and AI feature delivery. Gemini AI is now embedded across Workspace, and while Google says Workspace customer data is not used for model training, your content is processed by Gemini's systems when AI features are active. Client-Side Encryption (CSE) — where Google genuinely cannot read your documents — exists but requires Enterprise Plus or Education Plus plans, starts around $25–35/user/month, and demands a third-party key management service (FlowCrypt, Virtru, or Thales). That prices out freelancers and most small newsrooms. The bigger issue for journalists: Google complies with legal process. In H1 2024 alone, Google received over 82,000 government requests for user data globally, producing some data in roughly 83% of U.S. subpoena cases. The DOJ obtained Fox News reporter James Rosen's Gmail via search warrant in 2013 and ordered Google not to notify him. In January 2026, the FBI raided Washington Post reporter Hannah Natanson's home and seized devices in a leak investigation — the first raid of a journalist's home for a national security leak case. Your Google Docs are subpoena-able. For daily editorial collaboration, Google Docs is practical and well-built. For sensitive investigations, source protection, or anything that could become a legal target, use CryptPad or local encrypted documents instead.
Collaborative writing, editorial drafts, shared reporting documents, newsroom workflows that need real-time multi-user editing with commenting and suggestion mode.
Sensitive investigation documents, confidential source notes, legal-risk reporting, whistleblower communications, or anything you need to keep away from Google's servers and U.S. legal process. Google complies with subpoenas, search warrants, and FISA orders, and can produce document contents.
Security & Privacy
Data is scrambled while being sent to their servers
Data is scrambled when stored on their servers
Where servers are located — affects which governments can request your data
Privacy policy summary
Google encrypts data in transit (TLS) and at rest (AES-256) but is not zero-knowledge. Google accesses content for service operation, abuse scanning, and legal compliance. Gemini AI features process document content when active — Google states Workspace customer data is not used for model training, but content is still analyzed by AI systems for feature delivery. Google publishes a transparency report: in H1 2024, they received 82,000+ government data requests globally, producing data in ~83% of U.S. subpoena cases. Content requires a search warrant (not just a subpoena) to compel disclosure, but Google complies with valid warrants, court orders, and national security letters. Users are typically notified of requests unless a gag order prohibits it.
How to protect yourself:
Do not store sensitive source identities, confidential investigation notes, or legally risky material in Google Docs. Disable Gemini AI features in Workspace admin settings if you do not want content processed by Google's AI systems. Review sharing settings — 'anyone with the link' is a common misconfiguration that has exposed sensitive documents. Enable Google Advanced Protection Program (free) for phishing-resistant login with passkeys or security keys. For the highest-risk work, use CryptPad (zero-knowledge, end-to-end encrypted) or local encrypted documents. If your newsroom uses Workspace Enterprise Plus, enable Client-Side Encryption with a third-party key service.
Strong infrastructure security: AES-256 at rest, TLS in transit, ISO 27001 and SOC 2/3 certified, FIPS 140-2 validated encryption modules. But Google is not zero-knowledge — they can access your document content, and they comply with legal process (82,000+ government data requests in H1 2024 alone). Gemini AI processes document content when features are active. Client-Side Encryption exists but is locked behind Enterprise Plus plans ($25–35+/user/month) and requires third-party key management. Google Advanced Protection Program (free) adds phishing-resistant login but does not change Google's ability to access stored documents. Adequate for general editorial collaboration. Not recommended for sensitive source material, investigation notes, or legally risky reporting without Enterprise CSE. Journalists handling sensitive material should use CryptPad or local encrypted storage.
Who Owns This
Known issues
Google Docs comment feature has been repeatedly exploited for phishing — attackers use @mentions in comments to send malicious links that appear to come from Google's own servers, bypassing email filters. 'Anyone with the link' sharing misconfiguration has exposed sensitive documents across newsrooms, schools, and government agencies. In 2013, DOJ obtained Fox News reporter James Rosen's Gmail via warrant and gagged Google from notifying him. In January 2026, FBI raided Washington Post reporter Hannah Natanson's home and seized devices in a national security leak investigation — a precedent that makes all cloud-stored journalist documents more legally vulnerable. Gemini AI integration (rolled out across Workspace in 2024–2025) processes document content for AI features; while Google says Workspace data is not used for model training, the data is still analyzed by AI systems. Client-Side Encryption is limited to Enterprise Plus, Education Plus/Standard, and Frontline Plus plans — inaccessible to freelancers and small newsrooms. Notion has the same zero-knowledge gap: it is not end-to-end encrypted and can access user content. CryptPad is the only mainstream collaborative editor with true zero-knowledge encryption.
Pricing
Free with Google account. Google Workspace Business Starter: $7/user/month. Business Standard: $14/user/month. Business Plus: $18/user/month. Enterprise Plus (required for Client-Side Encryption): ~$25–35/user/month, quote-based.
This is an editorial assessment based on publicly available information as of 2026-04-02, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.
Something wrong or outdated? Report it.