Note that google cloud has an itar-compatible gemini pro and google drive / docs - so, people do talk to it - and google is of course contractually obligated to not export it, nor to learn from it.
This is very different that AWS fed-gov bedrock thingie - where AWS promises that the models are running on hardware dedicated to you, with no external logging, etc.