Google has announced the general availability of client-side encryption (CSE) for Google Sheets . This major upgrade gives organizations direct control over encryption keys and enhances data confidentiality in Google Workspace.
The company's move extends its strong security features to spreadsheets, ensuring that sensitive data is not read by Google. At the same time, it addresses critical compliance and data portability needs for enterprise customers.
The update brings a comprehensive feature set to encrypted spreadsheets. Users can now import, export, and decrypt client-side encrypted files directly in Sheets.
A key feature is the introduction of full interoperability with Microsoft Office formats. Users can work with encrypted Excel files using Office editing functionality and perform client-side conversions from Google Sheets to Excel format. This ensures seamless workflows for organizations operating in hybrid software environments.
See also: Microsoft Teams: Automatic notifications for malicious links
Additionally, integration with Google Vault and Takeout allows for secure export of encrypted files, supporting eDiscovery and data portability requirements without compromising security.
This enhancement is a direct response to the growing demand for stricter data management and compliance in the enterprise sector. By placing encryption keys in the hands of the customer, Google enables organizations to meet strict industry standards.
Client-Side Encryption for Google Sheets
With CSE, the contents of a file are encrypted in the user's browser before any data is transmitted or stored in Google's cloud. This means that neither Google nor any third-party service provider can access the encrypted content. This type of encryption provides essential protection for financial data, personally identifiable information (PII), and other confidential business information stored in spreadsheets.
The feature is enabled by default for organizations that have already configured client-side encryption.
See also: Signal: Secure backups to save & restore conversations
Google provides special tools to support these new features, including a data export tool for Vault, a decryption tool for accessing files offline , and a conversion tool for changing exported Google Sheets files to Microsoft Office formats.
For end users, the experience is designed to be as simple as possible. They can convert an existing spreadsheet into an encrypted file simply by using the 'Make a Copy' option and selecting encryption.
This feature began rolling out on September 4, 2025 for Rapid Release domains and will begin rolling out on September 18, 2025 for Scheduled Release domains . It will continue with a gradual rollout.
This advanced security feature is available to Google Workspace Enterprise Plus, Education Standard and Plus, and Frontline Plus, solidifying Google's commitment to providing secure collaboration tools.
In short, Google’s announcement of full client-side encryption in Sheets isn’t just a technical upgrade; it’s a strategic statement about the future of privacy in the cloud. At a time when the management of personal and business data is at the center of regulations like GDPR and HIPAA, this move offers organizations a rare level of control: data is protected before it even leaves the browser.
See also: Neon Cyber shifts cybersecurity focus to human resources
While most cloud companies often ask for trust from their users, Google is changing the narrative by shifting the responsibility (and power) to the customer themselves. This could dramatically change the balance in the productivity services, especially for industries like banking, healthcare, or government organizations, where the slightest leak could have incalculable costs.
Beyond security, the real innovation is interoperability with Microsoft Office. In a world where few organizations rely solely on one ecosystem, the ability to edit and convert encrypted Excel files reduces barriers and boosts productivity. Google doesn’t just protect data; it makes security compatible with today’s workflows.
