Google Apps Script is now a core Google Workspace service with enterprise-grade data protection and technical support. Administrators who previously disabled Apps Script can re-enable it to deliver secure custom automations. No action is required for organizations that already had it enabled or for end users.

• Google Apps Script became a core Workspace service on June 23, 2026, now covered by the same enterprise-grade security and compliance policies as Gmail and Drive.
• Admins who previously disabled Apps Script over security/compliance concerns can now re-enable it without needing extra compliance reviews.
• No action is needed for orgs that already had it enabled or for end users—functionality and settings remain unchanged.
• It's now visible in every Workspace customer's admin console regardless of Rapid or Scheduled Release track.

Salesforce rolled out Backup & Recover Next, a fully native backup solution with FedRAMP High authorization. It automates daily backups of all objects and sandboxes, offers fast, granular restores, and keeps data within the Salesforce Trust Boundary to meet strict security and residency requirements.

• Salesforce launched Backup & Recover Next, a fully native backup tool built inside its Trust Boundary with FedRAMP High authorization, the only native Salesforce backup tool meeting that standard
• 60% of Salesforce data loss incidents stem from human error like bad exports, sandbox refreshes, or third-party misconfigurations
• It runs daily automated snapshots of all objects, files, and sandboxes, allows side-by-side comparison and granular restores, and bypasses API governor limits
• It's 200% faster than the previous backup product and adds separate backup/restore user roles plus detailed audit logs

Universal Analytics offers an IP-address masking feature that truncates user IP addresses to enhance privacy and comply with data protection regulations. The process occurs in memory before any data is stored, ensuring full IP addresses are never recorded. Website owners can implement this feature using the anonymize_ip configuration in the gtag.js library.

• IP masking zeroes out the last octet of IPv4 addresses and the last 80 bits of IPv6 addresses almost immediately after Google Analytics receives the data.
• Truncation happens in memory before any storage occurs, so the full IP address is never written to disk.
• Enabling the feature only requires setting the anonymize_ip parameter (aip=1) via gtag.js.
• Even with masking, enough geographic information survives in the truncated address to still support location-based reporting.