> For the complete documentation index, see [llms.txt](https://docs.docontrol.io/docontrol-user-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.docontrol.io/docontrol-user-guide/best-practices/google-labels.md).

# Google labels

Best practices to leverage Google labels for maximum SaaS data security

Documents are shared by company employees thousands of times a day. Although collaboration is easy and efficient, over-sharing happens all the time. People add the wrong link permissions, share with their personal accounts, or even publish confidential documents to the whole world.

This can lead to sensitive data being overexposed, and opening the door to the risk of data exfiltration and even malicious data breaches. Unintentional sharing misconfigurations can cost companies millions of dollars in revenue, rack up legal fees, and have a negative impact on your organization's reputation.

Your employees are the weak link in your data security chain, but they're also the key to protecting it. With DoControl's proactive approach, you can nip any risks and vulnerabilities in the bud before they become major liabilities.

## What's a Google label?

A Google label is a tag or metadata that allows your company to organize, find and apply policies to Google Drive files, especially if the content is sensitive or classified. Only Google administrators can create labels. They can be applied manually or automatically to files in your Google Drive, depending on your company policy.

Once your files have Google labels, it's easy to know what files in your organization are sensitive, and where they're located. Leveraging DoControl, you can then focus on mitigating data loss of your sensitive files.

## Google Workspace DLP for labels

Google Workspace DLP is a Google Cloud service that scans all files across your organization’s Google Drive and automatically applies DLP labels according to rules.

DoControl leverages Google labels with HR, IdP (identity provider) and other SaaS application metadata to provide cohesive context, and boost your Google Drive data security up and beyond its standard capabilities.

## DoControl maximizes SaaS security with Google labels

After you set up Google Workspace DLP to support labels, and integrate Google with DoControl, all your asset labels are automatically displayed in DoControl’s asset inventory! What’s more, you can leverage Google labels in DoControl workflows to mitigate file exposure for assets with specific labels.

{% hint style="info" %}
Note: Google Workspace DLP is provided free as part of Enterprise edition.
{% endhint %}

**Follow these easy steps to integrate Workspace DLP capabilities with DoControl:**

1. [Set up Workspace DLP](/docontrol-user-guide/best-practices/google-labels/google-workspace-dlp.md)
2. [Create Google labels](/docontrol-user-guide/best-practices/google-labels/google-drive-labels/create-labels.md)
3. [Apply labels automatically](/docontrol-user-guide/best-practices/google-labels/google-drive-labels/apply-labels-automatically.md)
4. [Leverage Google labels in DoControl](/docontrol-user-guide/best-practices/google-labels/leverage-google-labels-in-docontrol.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.docontrol.io/docontrol-user-guide/best-practices/google-labels.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.