What Confidential Data Can Gemini Enterprise Agents Reach?
Everything the agent's service account can read, so an over-scoped account exposes whole projects. Check each account's grants and what the model reads.
Research topic
VPC Service Controls
Research on VPC Service Controls: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.