Google Workspace Grants Gemini Default Access to Gmail, Docs, Calendar, and Chat Data

What's happening

Google Workspace grants its Gemini chatbot default access to core company data sources — Gmail, Google Docs, Calendar, Chat, Meet, and Drive — without requiring administrators to opt in. The capability, which Google terms "Workspace Intelligence Sources," is enabled automatically across Workspace accounts, according to a report from ZDNet.

The mechanism is not a training pipeline. According to Google, Gemini does not use Workspace content to train its models, does not share prompts or outputs across organizations, and does not build a separate AI-specific database from company documents. Instead, Gemini relies on real-time retrieval-augmented generation (RAG): when a user submits a prompt, Gemini searches indexed Workspace data the user already has permission to access, retrieves relevant material, and generates a response using that context — the same indexing infrastructure Google Search has used on Workspace data for years.

Why it matters

Even without training or cross-organization data sharing, the default-on access creates internal governance risks that organizations may not have accounted for. Three specific concerns stand out:

• Regulatory and contractual compliance. Some client contracts or industry regulations explicitly prohibit AI systems from scanning or retrieving company data, even for internal use only.
• Departmental isolation. Because Gemini pulls from indexed Workspace content, an employee's routine query could surface confidential material — HR complaints, deal terms, legal correspondence — stored in a Doc or Chat log outside their department, without any malicious intent involved.
• Insider threat surface. The same access pattern that enables convenience also gives curious or malicious employees a potential path to information they would not otherwise be authorized to view directly.

How to disable it

Workspace administrators can turn off Intelligence Sources organization-wide by logging into admin.google.com, navigating to Generative AI > Gemini in Workspace, and selecting the Workspace Intelligence Sources block, where a toggle disables each source for the entire domain.

Per-user controls are more limited. ZDNet's David Gewirtz reported that attempting to disable a specific source, such as Drive and Docs, for an individual user produced no functioning interface — the setting is marked view-only at the user level. According to Google's own Gemini assistant, admins wanting to restrict access for specific individuals must move those users into a separate organizational unit or group and apply the policy there, rather than adjusting settings per account.

What this means

This is a default-configuration issue, not a new data-sharing practice — Google says the underlying retrieval mechanism has effectively existed since Workspace search was introduced. But defaults matter: many IT and compliance teams may not realize Gemini's Workspace integration was switched on without an opt-in step, and the lack of granular per-user controls forces organizations into blunt, org-unit-level workarounds rather than precise permissions. Companies in regulated industries or those with strict internal data-segregation requirements should audit their Workspace Intelligence Sources settings now rather than assume Gemini's data access is disabled by default.