Configure Gemini for Government for FedRAMP 20x Class B (Low)

Last reviewed 2026-06-11 UTC

This page describes how government agencies can deploy Gemini for Government under FedRAMP 20x Class B (Low) criteria. The FedRAMP 20x Class B (Low) authorization covers publicly releasable information with minimal sensitivity. If your agency requires processing data at a FedRAMP Moderate or High level, see Deployment guidance for Gemini for Government.

To request access to detailed Gemini for Government FedRAMP 20x Low documentation, email [e-mail] and state your interest in obtaining the package materials.

FedRAMP 20x Low certified services

The following services are listed as certified within the Gemini for Government FedRAMP 20x Low boundary:

• Gemini Enterprise
• Generative AI on Gemini Enterprise Agent Platform (formerly Generative AI on Vertex AI)
• BigQuery
• Cloud Storage
• Looker (Google Cloud core)
• Conversational Agents
• Gemini Code Assist
• NotebookLM Enterprise
• Agent Search on Gemini Enterprise Agent Platform (formerly Agent Search)

This certification level is intended for unclassified information with minimal sensitivity.

FedRAMP 20x Low certified services and features

The following table lists the services and features that you can use within Gemini for Government for FedRAMP 20x Class B (Low).

Models	Generally available Gemini models
Agents and galleries	Prompt gallery Data Insights agent Idea Generation agent Deep Research agent No-code agent creation using Agent Designer Agent Gallery
Analytics and dependent features	View analytics data Data agent context for Looker data sources Data agent context for BigQuery data sources Data agents that you create using the Conversational Analytics API Gemini in BigQuery Gemini in Looker
Data connectors and stores	FedRAMP Authorized data stores such as Cloud Storage and BigQuery Google Workspace data sources such as Google Drive, Gmail, or Google Calendar Google Cloud data stores such as Cloud SQL and Firestore Google Calendar and Gmail actions Third-party data sources such as Salesforce or Microsoft People data sources such as Google Workspace, Microsoft Entra, or custom sources
Grounding	Web Grounding for Enterprise Grounding with Google Maps Platform Grounding with Google Search Grounding using Google Drive uploads Grounding using Microsoft OneDrive uploads
Generative features	Generate images using Imagen Generate video with Veo
User, session, and UI features	Autocomplete Serving controls Uploading documents from local machines Ability for end users to select models User events for Gemini Enterprise apps Personalization and memory in Gemini Enterprise Prompt chips
Other features	Private Knowledge Graph in Gemini Enterprise NotebookLM Enterprise Implicit context caching Gemini Code Assist Model Armor Image generation using Nano Banana

Configure your environment

Complete the following tasks within the Google Cloud organization of your agency.

1. Create a Google Cloud project to host your Gemini Enterprise data stores and applications.
2. Configure your APIs and solutions in Gemini Enterprise. Your subscription settings automatically enable Gemini for Government. Gemini for Government includes the Gemini Enterprise Standard Edition and prevents unexpected costs by stopping requests after a quota is reached, rather than billing for overages. You can manage these settings within the subscriptions console.

3. Configure security features for Gemini for Government as described in the Gemini Enterprise security overview. To help ensure compliance with FedRAMP 20x, configure the following based on your agency's policies:

   • Identity and Access Management (IAM)
   • Gemini Enterprise data security, particularly VPC Service Controls and customer managed encryption keys (CMEK)
   • Gemini Enterprise compliance, particularly access transparency and audit logging

4. Optionally, review and apply additional security best practices for Google Cloud:

   • Google security overview
   • General best practices
   • FedRAMP implementation guidance on Google Cloud

Manage your compliance for FedRAMP 20x

To maintain your FedRAMP 20x Class B (Low) compliance posture for Gemini for Government, you can use Compliance Manager. Compliance Manager includes a FedRAMP Low 20x framework that you can deploy in your environment and use for auditing.

1. In the console, select the United States regional toggle, and adjust the view to Global. Locate the relevant domain address and select Configure to proceed.
2. Activate Security Command Center Premium to enable Compliance Manager.
3. In Compliance Manager, deploy the FedRAMP 20x framework. For instructions, see Deploy a framework. Deploying the framework lets you monitor for compliance.

4. Audit the FedRAMP 20x framework to compile compliance evidence. For instructions, see Audit your environment with Compliance Manager. An audit can take several hours to run.

   Note: The artifacts produced during an audit are provided to support your own audit preparation and process. They aren't guaranteed to satisfy all auditor or regulatory requirements. It is your responsibility to collaborate with your auditors to ensure compliance.

5. Review the detailed audit assessments against each resource and rule. Optionally, download the evidence to support your FedRAMP package submission.