Google Drive

What it is

Google Drive is the file and knowledge layer of Google Workspace. Docs, Sheets and Slides live in it, shared drives hold team files, and Gemini, Workspace Studio agents and almost every third-party AI tool (Glean, ChatGPT, Claude, Dust) read company documents through it. If your company runs on Workspace, Drive is already your document system. The real question is what agents can safely read from it, and whether the permissions you set for people also hold for machines.

Three 2026 changes matter for that question. On 1 May 2026 Google opened the Workspace MCP server to public developer preview. It gives agents tools to fetch, list and upload Drive files and to manage their permissions, next to tools for Gmail, Calendar, Chat and People. On 4 May 2026 the AI control center appeared in the Admin console under Generative AI, as one place to monitor AI usage across Drive and the other apps and to set data-protection rules. On 17 August 2026 Google added enterprise controls for Workspace Studio, its no-code agent builder: new flows run under their own least-privilege identity, and Gemini DLP can block Gemini from reading Drive files by content or label.

The question it answers

Our documents live in Drive, not SharePoint or Box. What can agents safely read, and how do permissions carry through? The short answer: Gemini sees exactly what the signed-in user can open in Drive, no more. If a file owner blocks download, copy and print, Gemini cannot read the file even when it is shared with you. Third-party tools act through OAuth scopes the user or admin grants. The weak point is not the AI. It is years of “anyone with the link” sharing, which every agent turns into search results.

Pricing reality

Drive is not sold on its own for business use. You buy a Workspace edition. US list prices per user per month (Google renders prices by region, so confirm on the pricing page):

• Business Starter: $7 on an annual plan, $8.40 flexible. 30 GB pooled storage per user. Gemini only in Gmail; limited elsewhere.
• Business Standard: $14 annual, $16.80 flexible. 2 TB per user. Gemini in Drive, Docs, Gmail and Meet.
• Business Plus: $22 annual, $26.40 flexible. 5 TB per user. Adds Vault for retention, legal holds and eDiscovery export.
• Enterprise: quote only, no user cap. The Business editions stop at 300 users.
• AI Expanded Access add-on (since 5 February 2026, Business/Enterprise Standard and Plus): higher limits in the Gemini app, NotebookLM and Workspace Studio. Google publishes no list price; one third-party source reports about $20 per user per month, unverified.

A worked band for 200 users: Business Standard is 200 × $14 × 12 = $33,600 a year. Business Plus, which most legal teams need for Vault holds, is $52,800 a year and pools 1 PB of storage, so storage almost never becomes a line item. Gemini DLP is only on Enterprise Standard and Plus, so a team that must label-gate privileged files away from Gemini needs an Enterprise quote, not Plus.

Best for

An ops, legal-ops, recruiting or CS leader at a Google Workspace company of 20-2,000 employees who wants Gemini, a Workspace Studio flow or a Glean-style tool to answer from contracts, playbooks, candidate packs and QBR decks without buying a separate document system. It wins outright for startups and scale-ups that already collaborate in Docs and Sheets: the files, comments and permissions are already where the agents look.

Not for

Law firms and legal departments that file by matter and need enforced ethical walls; Drive has neither natively. Microsoft 365 tenants. Teams on Business Starter that expect Gemini to work across Drive. Anyone who needs to give an unattended production agent write access to Drive today: the Workspace MCP server is a developer preview, and your Google Cloud project has to enrol in the Workspace Developer Preview Program before it appears.

Versus the alternatives

• Microsoft SharePoint: the other dominant suite-bundled document layer. Pick it when the company runs on Microsoft 365 and Teams; Copilot in SharePoint does for that tenant what Gemini does here.
• Box: pick it when files are shared heavily with outside parties, or when one content store must serve both Google and Microsoft users with one permission model and Box AI on top.
• Notion: the fastest-growing entrant in team knowledge. Pick it for a small team’s operating docs and wikis. Keep signed contracts and anything under legal hold in Drive, where Vault applies.
• Glean: not a replacement but a layer. Pick it when Drive holds less than half your knowledge and the rest sits in Slack, Salesforce and Jira. At its reported 100-seat minimum it adds tens of thousands of dollars a year, so it only pays off at that spread.

Watch-outs

• Agents find what sharing already exposes. Files shared “anyone in the organisation with the link” become Gemini and Glean answers the day AI is switched on. Guard: before rollout, set the default link-sharing to restricted, run a Drive sharing review of the shared drives that hold contracts, comp and candidate data, and use the admin setting that restricts Gemini’s access to Workspace data for those organisational units until the clean-up is done.
• Gemini DLP is Enterprise-only. On Business Plus you cannot block Gemini from a file by label. Guard: on Business editions, put privileged material in a separate shared drive with tight membership and turn on the owner restriction on download, copy and print, which Gemini also respects. If that covers more than a few hundred files, price Enterprise.
• Old Studio flows keep their old privileges. The August 2026 least-privilege identity, audit context and agent-access dashboard apply to newly created flows only. Guard: rebuild any flow created before the rollout that touches Drive, and turn on the setting that requires user confirmation for steps that share data externally.
• Third-party connectors carry the user’s OAuth grant. A connector given full Drive scope can read everything that user can. Guard: in Security > API Controls, allow-list only reviewed apps and prefer read-only or drive.file scopes, which limit an app to files it created or that the user opened with it.
• Vault starts at Business Plus. Business Standard has no legal hold. Guard: if litigation or regulatory holds are realistic, budget Plus from day one rather than migrating mid-matter.

Related: Gemini Enterprise covers Google’s separate agent platform. MCP servers explained covers how the Workspace MCP server fits agent tooling, the legal hold process entry covers what Vault has to do, and retrieval-augmented generation explains why file hygiene decides answer quality.