Rubrik has expanded its cyber resilience push into Google Workspace, rolling out a data protection offering for Gmail and Google Drive that it says is designed to help enterprise customers recover faster from cyberattacks, accidental deletion and operational disruption. The company announced the product on March 19, positioning it as one of the first unified cyber resilience platforms built for Google Workspace and tying it to a broader security model spanning data, identity and artificial intelligence. The launch matters because Google Workspace sits at the centre of daily operations for millions of businesses, making email and file stores a high-value target when attackers seek to freeze organisations or extract ransom. Rubrik’s pitch is that cloud productivity suites cannot be treated as isolated software tools any longer; they have become operational systems whose compromise can paralyse communications, documentation and internal decision-making. Google says its platform is used by millions of businesses, while Rubrik framed the addressable market even more broadly by saying more than 11 million enterprises using Google Drive and Gmail could use such resilience features.
Rubrik says the new service offers immutable, air-gapped backups for Workspace data, rapid restoration, policy-based protection and what it describes as point-and-click recovery intended to cut restoration times from days to minutes. The initial emphasis is on Gmail and Google Drive, two repositories that often hold the most commercially sensitive material inside a Workspace environment, from contractual correspondence and board communications to shared files, financial models and compliance records. The company has folded the product into its wider platform strategy, which increasingly combines classic backup with identity monitoring and governance around AI use.
That last point is central to Rubrik’s messaging. Rather than selling backup as a narrow storage function, the company is arguing that cyber resilience now depends on protecting three connected layers at once: data, user identity and AI-driven workflows. Anneka Gupta, Rubrik’s chief product officer, said organisations can no longer protect data in isolation because an attack or error affecting one layer can threaten the wider estate. The framing reflects a wider shift in enterprise security, where vendors are trying to move beyond recovery tools and present themselves as control platforms for hybrid cloud and AI-heavy environments.
The commercial logic is also clear. Rubrik reported strong growth in its latest financial results, with fiscal 2026 subscription revenue of $1.26 billion and total revenue of $1.32 billion, as it pushed deeper into subscription-led security services. Adding Google Workspace protection gives the company another way to widen its reach within existing enterprise accounts while competing more directly with specialists and broader data protection vendors already offering cloud app backup and recovery. Rivals and adjacent players such as Cohesity, Acronis, HYCU and others have also been pushing the message that SaaS data needs dedicated protection beyond the native tools bundled with major platforms.
The product arrives at a time when resilience has overtaken prevention as a board-level security theme. Gartner said in February that GenAI adoption is introducing new security strains inside organisations, including the use of personal AI accounts for work and the input of sensitive information into unapproved tools. That matters for Workspace customers because the spread of AI assistants across email, documents and collaboration systems is increasing the amount of sensitive business content moving through cloud services, while also raising the stakes if permissions, retention settings or identities are compromised.
Rubrik’s argument also leans on a practical weakness in native recovery options. Google provides administrators with tools to restore certain deleted data, but those windows are limited in key cases. For example, Google’s admin guidance says deleted Drive items can be recovered within 25 days after a user empties the trash, after which the data is purged and cannot be recovered. That does not mean Google Workspace lacks safeguards; it does mean many enterprises still see a gap between platform availability and the kind of granular, long-retention recovery they want for legal, operational and ransomware scenarios.
Topics
Technology