How to export your data from Google Workspace

A practical guide to the documented export paths out of Google Workspace: the admin Data Export tool, user Takeout, their limits and run times, and what must be handled by other means before the contract ends.

On this page

How to export your data from Google Workspace before you leave

If you are leaving Google Workspace because of a renewal, a licensing change, a data residency requirement or lock-in, the documented ways out are the super administrator Data Export tool and per-user Google Takeout. The admin tool exports organization data, including Gmail, Drive, Chat and Calendar, as zip files into a Cloud Storage bucket, so it is the path for a whole-domain move. Takeout lets individual users download their own data from products such as Gmail, Drive documents and Calendar, and your Workspace administrator controls whether users can use it at all. Before you rely on either path, confirm with Google which editions and account ages qualify, because the Data Export tool requires the admin account to be at least 30 days old.

Plan for the run time before you plan the cutover. Google's documentation says exports typically take about 72 hours but can take up to 14 days, and the default bucket is deleted after 60 days, so copy the archive to your own storage well inside that window. Expect zip archives that you must convert and import rather than files that load directly into a new platform. Native Docs, Sheets and Slides files are not plain office documents, so confirm with your target team how they will be converted to docx, xlsx or OpenDocument. Mail, calendar and contacts usually need a separate import step, and contacts are commonly moved as vCard files and calendars as iCal files. Verify each format against a sample account before the full run.

Start the work well before the contract ends. Inventory shared drives, sharing links, Vault holds and user-owned data that Takeout will not capture for everyone, and agree with business owners which data must be retained and where. Ask your implementation partner or target vendor to confirm the import path for each data type in writing, and run at least one full test export and restore in a non-production tenant. A rehearsal reveals gaps in permissions, large files and mailbox sizes while you still have a live Google contract to fall back on.

Which Google Workspace data the export tools can take out

This table maps each Google Workspace data type to the admin Data Export tool or user Takeout, with the delivery format and documented limits. Read each row against your own edition and account age, because the admin tool and Takeout differ in who can run them and where the files land.

Data typeExport methodFormat and deliveryDocumented limits and what to confirm
GmailAdmin Data Export (organization-wide), or user Takeout if the admin allows itZip files written to a Cloud Storage bucket for the admin export; mail is delivered from the account rather than a bucket in TakeoutAdmin account must be at least 30 days old. Confirm with your admin console whether Takeout is enabled for users and which edition covers your accounts.
Drive filesAdmin Data Export, or user Takeout for files the user ownsZip files in the Cloud Storage bucket for the admin export; native Google formats need conversion on the way outConfirm with Google which Drive content is included for your edition, and check shared drives and files owned by departed users separately.
ChatAdmin Data Export only for organization-wide historyZip files in the Cloud Storage bucketConfirm that the Chat history you need is in scope for your edition and retention settings before you rely on the export.
CalendarAdmin Data Export, or user TakeoutCalendar data in iCal format; contacts in vCard format through Takeout or Contacts exportConfirm the calendar sharing and recurring-event detail survives the iCal format you receive.
Docs, Sheets and Slides (Takeout)User Takeout only, subject to admin controlConverted to Office or OpenDocument formats per Takeout settingsConfirm the target formats (docx, xlsx, pptx or OpenDocument) with your migration plan, since conversion can change layout and formulas.
ContactsTakeout or Contacts export per uservCard formatConfirm per-user contact coverage, since the admin Data Export page does not establish a contact-level list for every account.
Run time and deliveryAdmin Data ExportZip files in a Cloud Storage bucketExports typically take about 72 hours, and can take up to 14 days (Google Workspace Admin Help). The default bucket is deleted after 60 days, so download the files before that date.

When the admin Data Export tool is the right path and when Takeout is

For a complete exit from Google Workspace, the organization-wide Data Export tool is the right path, because it is the only option here that covers the whole tenant in one run. A super administrator starts it from the admin console and selects the organization's data, including Gmail, Drive, Chat and Calendar. The export is written as zip files into a Cloud Storage bucket, so the output sits in one place you control and can hash, index and hand to your migration team. Before you start, confirm that the admin account meets the documented age requirement, which is at least 30 days old, and check that your edition and tenant settings allow the export in your own console.

The per-user Google Takeout service works differently. Each individual user downloads their own data from Google products such as Gmail, Drive documents and Calendar, and the data is delivered to that user. Google documents that Workspace administrators control whether users can use Takeout at all, so an administrator may have switched it off. Treat Takeout as a gap filler, not as the exit mechanism: it is useful for personal items that the organization-wide run does not cover in the form you need, or for a user who must retrieve something urgently. It does not give you a single, auditable archive for the whole domain, and relying on dozens of individual downloads makes completeness hard to prove. Build the plan around the two paths together. Ask your Google Workspace administrator to confirm, in your own tenant, whether Takeout is enabled for users and which products it covers, and record the answer as part of your exit evidence. Then schedule the Data Export run early enough to absorb the documented processing window, which Google describes as typically about 72 hours but up to 14 days, and remember that the default bucket is deleted after 60 days, so copy the output to your own storage before that point. Any user whose needs fall outside the organization-wide export should be listed and handled through Takeout or through a documented manual process.

What does not export and the workarounds for each gap

Neither the admin Data Export tool nor Takeout moves everything that makes a Workspace tenant work. Native Google files, sharing rules, group setup, security settings and Chat or Meet content each need a separate step. The cards below name each gap, the workaround, and what to confirm with Google before the contract ends.

Native Docs, Sheets and Slides files

Google-native files are stored as Google formats, not as Word, Excel or PowerPoint files, so they need conversion before they open in Collabora Online or another office suite. Plan a manual or scripted export to docx, xlsx and pptx, or to OpenDocument, and test a sample of complex layouts, comments and linked charts. Confirm with Google which export formats your edition offers for each file type and whether Takeout's conversion options cover your full library.

Sharing settings and link permissions

Data exports carry file contents, but the sharing model that tells you who could open each file does not translate into Nextcloud or openDesk permissions. Record external shares, anyone-with-link settings and domain-wide sharing rules from the admin console before the export window closes. Rebuild the important ones as Nextcloud shares or group folders after import. Confirm with Google which sharing metadata, if any, appears in the export package for your tenant.

Shared drive membership and roles

Shared drives hold files that no single person owns, and their membership and manager roles are not a file attribute an export tool carries across. Export a membership list per shared drive with each member's role, then map those roles to Nextcloud group folders or openDesk groups. Without that map, migrated content can end up with no owner. Confirm with Google whether your admin reports list every shared drive member and role.

Group and directory configuration

Google Groups, organizational units and user attributes shape access in Workspace, yet the Data Export covers content rather than the directory itself. Export the group list and membership, then recreate the structure in your identity provider, such as an LDAP or Active Directory directory that Nextcloud can read through its LDAP app. Confirm with Google which directory objects you can export through the admin console or the Directory API.

User security and authentication settings

Two-step verification enrollment, app passwords, security keys, recovery settings and login alerts belong to each account and are not moved with mail or files. Document the policy you enforce today, then configure your target login path, such as OpenID Connect or SAML in Nextcloud, before users switch. Users will need to re-enroll their second factors. Confirm with Google which security settings you can read as an admin and which must be set again by each user.

Chat and Meet content outside the export

Chat history is covered only by the Data Export tool for the organization, and Meet recordings and transcripts stored in Drive follow Drive rules rather than a Chat export. Decide which history must move and which can stay archived. Confirm with Google which Chat spaces, direct messages and Meet artifacts the export includes for your edition, and where recordings are stored, before the contract ends.

The sequence for a complete export, with verification at each stage

This sequence moves your organization's Google Workspace data out in a fixed order, with a check at each stage so that nothing is lost before the source is retired and the export is signed off.

  1. Confirm account age and edition eligibility

    A super administrator confirms that the admin account used for the export is at least 30 days old and that the organization's edition supports the Data Export tool. Ask your Google reseller or check the admin console for the exact edition requirements before you go further. The output is a short written note naming the admin account, its creation date and the edition, which goes into the migration file so the eligibility check can be repeated later.

  2. Create the Cloud Storage bucket and set permissions

    Create a Google Cloud Storage bucket to receive the export and grant the super administrator the write access the export needs. Keep the bucket in a project your security team controls, restrict access to named staff, and record the bucket name and location. Confirm the bucket's retention settings now, because the default bucket is deleted after 60 days. The output is a bucket with a documented owner, access list and deletion date.

  3. Start the organization export and select services

    From the admin console, a super administrator starts the Data Export and selects the services to include, such as Gmail, Drive, Chat and Calendar, and the target bucket. Record the export start time, the selected services and the requesting account in your migration log. Export jobs are long-running, so the output is an export request reference and a status page you can check, not a finished archive.

  4. Track the run window until the archive is complete

    Monitor the export until each zip file appears in the bucket. Google's documented run time is typically about 72 hours and can take up to 14 days, so plan staff time around that range rather than a single day. Check progress daily, note any service that finishes early or late, and escalate to Google support if the job stalls. The output is a completion log showing when each archive appeared.

  5. Download the archive before bucket deletion

    Copy every zip file from the bucket to your own verified storage well before the 60-day deletion point. Use an approved transfer method and keep the original files unchanged. Compare the bucket listing against the local copy file by file. The output is a complete local archive with a manifest of file names and sizes, plus the date on which the bucket can be safely deleted after sign-off.

  6. Verify counts, checksums and calendar items

    Compare the exported data with the source. Generate checksums (for example SHA-256) for every archive and store them with the manifest. For Drive, compare file and folder counts and total size. For Gmail, compare message counts per mailbox against the sample you select from the admin console. For Calendar, compare event counts per calendar. Where a count differs, record the cause, such as deleted items or unsupported types. The output is a verification table signed off per service.

  7. Use per-user Takeout to fill gaps

    Where the organization export does not cover items you need, ask affected users to run Google Takeout for their own account. Your Workspace administrator controls whether users can use Takeout, so confirm that setting first. Takeout covers items such as Gmail, Drive documents and Calendar. Store each user's archive in the same location as the organization export and add it to the manifest. The output is a per-user gap list showing what was recovered and what remains unrecoverable.

  8. Record the sign-off before retiring the source

    Write a sign-off record that lists the export request reference, the bucket and archive manifest, the checksums, the verification results, the Takeout gaps and the owner who accepted each service. Do not delete the Google Workspace source or the bucket until this record is approved by the data owner and the security or compliance lead. The output is a signed export record that feeds the next migration stage and any later audit evidence.

How to verify an export is complete enough to leave on

A finished Data Export or Takeout archive only proves that Google produced files. It does not prove that you can use them. Before you close the Workspace tenant, compare what left the source with what arrived in the target, data type by data type. Count items and measure sizes for Gmail, Drive, Calendar, Contacts and Chat separately, and record the totals from the export side so the comparison is repeatable. Expect differences where Google converts native files or skips items it cannot represent, and write those exceptions down rather than treating them as surprises. Confirm the export's delivery details too: the zip files should sit in the Cloud Storage bucket you chose, and you should download or copy them before the default bucket is deleted after 60 days.

Counts alone miss problems that matter in daily work. Sample real items in the target system: open a set of mail messages with attachments, check that labels or folders map to the expected places, confirm that calendar events keep their times, recurrence rules and attendees, and search for a few known contacts. Check that the vCard files for contacts and the iCal files for calendars parse in the tools your users will run, because a file that unzips can still fail to import. Then confirm that restored Drive folders keep their nesting, file names and version history where your target supports it. Ask the target platform's vendor or implementer which of these fields it preserves, and test each one.

Treat the verification as a gate, not a formality. Run the checks with a pilot group of real users and real data, including a shared folder and a mailbox with a large history, and keep the results with the migration record. Only after the pilot passes should you move the remaining users and retire the source. If a check fails, fix the mapping and repeat it rather than accepting the gap. Plan for a window in which both systems stay available so users can verify their own items, and confirm with the target vendor how long that window needs to be in your environment.

What to plan before the Google Workspace renewal or termination date

The export itself is the easy part. The decisions that go wrong are the ones made before the export starts: how long the data window is, where the target platform is tested, and who is affected by the cutover. Each card below is a decision or check to settle before the renewal notice point, so the export runs against a known plan.

Confirm notice and retention terms

Notice periods, termination dates and post-termination data retention are set by your own Google agreement, not by the tool documentation. Pull the signed order form and any data processing terms, and record the exact date by which you must give notice. Ask your account team in writing how long Google keeps customer data after termination, and whether any retention extends past the bucket deletion window in the Data Export tool.

Plan the export window and bucket

The admin Data Export tool needs an admin account at least 30 days old, and exports typically take about 72 hours but can take up to 14 days (Google Workspace Admin Help). Schedule the run well before cutover and leave room for a second run. Download the zip files from the Cloud Storage bucket before the default bucket is deleted after 60 days, and copy them to storage you control.

Choose and test the target platform

Decide whether Gmail moves to OX App Suite and Drive to Nextcloud with Collabora Online, or whether the whole estate moves to openDesk. Run a test migration with a pilot group and a copy of the export, covering mail, calendar, contacts and converted Docs, Sheets and Slides files. Measure conversion losses, shared drive permissions and sync behavior before committing to a production date.

Map DNS and mail flow cutover

Mail routing, MX records, SPF, DKIM and DMARC records, and any third-party senders such as scanners, CRMs and ticketing tools all depend on the current Google setup. Document every sender and recipient that relies on the domain, plan a cutover with a rollback path, and lower DNS record TTLs ahead of the change. Confirm with the target platform's documentation how mail coexistence works during the transition.

Address legal hold and retention duties

Email, chat and files may be subject to litigation holds, regulatory retention periods or records schedules that outlive the Google subscription. Identify which mailboxes, Chat spaces and Drive folders carry holds before the export. Decide who owns the exported archive, how it is indexed and searched, and how deletion is evidenced once the Google data is removed. Involve legal and records management early.

Communicate with users and devices

Users need to know which address, client and sign-in changes, when mobile devices must be reconfigured, and where to find files during the transition. Plan the message schedule, the support queue for the cutover week, and how Takeout will be used for personal data that the admin export does not cover. Check whether Workspace administrators have turned off user-level Takeout, since that affects who can self-export.

Budget for running both platforms

Parallel running is the largest hidden cost. Google subscriptions continue until the end date while the new platform is built, tested and staffed. Self-hosted costs include infrastructure, storage for the exported archive, database and backup operations, and any support subscription, such as Nextcloud Enterprise tiers priced per user per year from 100 users. Ask each vendor or partner for a written quote that separates one-time migration work from recurring run costs.

Which self-hosted targets take the exported data

Gmail and Google Calendar data belong with OX App Suite, which provides email, calendar, documents, drive and tasks and can run on premises or in a public cloud. The Data Export tool and per-user Takeout produce the source data, but the import path into OX decides the format you prepare. Confirm the import formats OX App Suite accepts for each item type in your version before you convert anything.

  • Contacts and calendars: Plan for vCard for contacts and iCal for calendars, the formats this export covers, and confirm both with a test import.
  • Zip unpacking: Data Export delivers Gmail and Calendar data as zip files in a Cloud Storage bucket, so add an unpacking step before any import tool reads the content.
  • Platform prerequisites: OX App Suite v8 is delivered as Helm charts on Kubernetes, requires Helm 3.17.0 or newer, and needs Istio or the basic ingress-nginx option.
  • Data stores: Plan for MariaDB with InnoDB (10.6.x, 10.11.x, 11.4.x or 11.8.x), Redis 7.4.x, and a distributed file system such as NFS or object storage for drive files and attachments.
  • Release line: The support commitment names v8.47 as the current LTS, so confirm whether a newer LTS has since been published before you pin a version.

Check the requirements page for exact Kubernetes and Istio versions before you size the cluster.

What teams ask before exporting their Google Workspace data

How long does a Google Workspace data export take?

Google's Data Export tool typically finishes in about 72 hours, but it can take up to 14 days. The run time depends mainly on how much data sits in Gmail, Drive, Chat and Calendar and how many items the export has to package. Large mailboxes and large Drive estates push the job toward the upper end, so plan the export window with that range in mind. Confirm the current figures with Google before you commit to a cutover date, since the documented range is the only timing you should rely on.

Can a non-admin user export Google Workspace data on their own?

Yes, but only for their own data. Individual users can run Google Takeout to download content from products such as Gmail, Drive documents and Calendar. The organization-wide Data Export tool is limited to super administrators, and Workspace administrators decide whether users can use Takeout at all. For a company leaving Google, the admin export is the one that covers all accounts, shared content and the organization as a whole, so end users cannot replace it.

Does the export need a Google admin, an IT team or outside help?

It needs a super administrator to start the export and an IT team to receive and check the output. The admin chooses the products to include, names a Cloud Storage bucket and monitors the job. Your IT team then has to download the zip files, validate them and load them into the target systems. Effort grows with the number of mailboxes, shared drives and native Docs, Sheets and Slides files. Outside help is usually a question of capacity and specialist conversion work, and a fixed-scope engagement with written deliverables makes the split between internal and external work explicit before you start.

Does the Google Workspace account need a minimum age or edition?

The admin account that runs Data Export must be at least 30 days old. Confirm your edition's access to the tool in Google's admin documentation before you plan, because the availability of export features is tied to the Workspace setup in your organization. A new tenant or a recently created admin account cannot start the export until the 30-day requirement is met, so check this early in a migration project.

What happens after the 60-day bucket deletion?

The default Cloud Storage bucket that holds the export is deleted after 60 days. Once it is gone, the exported files are no longer available from that location, so you must download and verify everything within that window. Copy the zip files to your own storage, record checksums, and confirm that mail, Drive files and calendars open correctly in the target systems. Treat the bucket as a transfer point, not an archive, and write the retention and deletion steps into your migration runbook.

Are vCard and iCal files enough to move contacts and calendars?

vCard and iCal are standard formats that most mail and calendar servers can import, but they are only part of the job. Contacts usually arrive as vCard, and calendars as iCal, which covers the event data itself. Recurring events, shared calendar permissions, attendee status and attachments often need separate checks after import. Test a sample set in the target system first, and confirm with your chosen platform's documentation which fields it preserves.

Is a data export alone enough to leave Google Workspace?

No. An export gives you a copy of the data, but leaving also means moving identity, sharing and users. Sharing links, group membership, Drive permissions, shared drives, native Google file formats and mail routing all need a plan. Your target platform must also be configured for single sign-on, storage and backup before cutover. Native Docs, Sheets and Slides files typically need conversion to formats such as docx, xlsx or OpenDocument, which is extra work that the export does not do for you. Scope these items in writing before you set a cutover date.

What DeployOpen handles in a Google Workspace exit

DeployOpen can take on the export side of a Google Workspace exit as a planned piece of work under a written, fixed scope. In practice that means agreeing which products are in scope (Gmail, Drive, Calendar, Chat and any shared drives), choosing between the admin Data Export tool and per-user Takeout for each data set, and setting the export window around the admin account age requirement, the run time Google documents for Data Export and the 60-day deletion of the default Cloud Storage bucket. The scope document is where the reader should confirm which items the work covers and which remain with the client, such as user-level Takeout requests and any Chat history the client wants to keep.

Verification is the part most often underestimated. DeployOpen can define checks that compare exported archives with the source: item counts by mailbox and folder, file counts and sizes in Drive, vCard and iCal output for contacts and calendars, and a sample of shared files opened to confirm that sharing and ownership survived the move. It can also prepare the target platform, such as Nextcloud with Collabora Online or OX App Suite on Kubernetes, so that imported data lands on tested infrastructure. Ask for the verification method and the acceptance criteria in writing before the export starts, and confirm which format conversions, such as native Docs, Sheets and Slides files, are included.

Evidence is delivered as documentation the client keeps: the export runbook, the verification results, the decisions made on exceptions, and the retention and deletion steps taken for the Cloud Storage bucket. DeployOpen prepares this material so that the client's own auditors or compliance team can review it. It does not issue audit reports, attestations or certifications, and it cannot promise how an independent assessor will judge the result. Confirm with your assessor which records they expect before the work begins, and ask any proposal to state what is delivered, who signs off each stage and how changes to scope are handled.

How DeployOpen works on this

DeployOpen plans and implements the self-hosted platforms that receive a Google Workspace export, inside your own cloud accounts, data centers or air-gapped networks. The work starts with a written scope that fixes what is exported, where it lands and how it is checked before any user data moves.

How we scope

  • Inventory which Gmail, Drive, Calendar and Chat data must leave, and which user groups own it
  • Decide between admin Data Export and per-user Takeout based on your account age and edition
  • Plan the Cloud Storage bucket, retention window and access controls before the export is started
  • Agree the written scope, deliverables and timeline in writing before any work begins

How we build

  • Prepare the target Nextcloud, OX App Suite or openDesk environment inside your own infrastructure
  • Set up a test export with a limited set of accounts to confirm formats, sizes and import paths
  • Script the import of mail, calendars and contacts, and document any conversion of native Google files
  • Test restored data against source counts and sample documents before wider rollout

How we hand over

  • Deliver runbooks covering export steps, bucket handling, verification checks and deletion of staged copies
  • Document the mapping from Google formats to vCard, iCal and office file formats used at the destination
  • Record access decisions and retention settings so your compliance team can review them
  • Walk your administrators through the import and verification steps before handover is signed off

How we support

  • Support is available as a retainer for issues that appear after cutover, such as late-arriving data
  • Retainers can also cover platform upgrades, backups and continuous security testing of the target system
  • Confirm with us which support hours, response targets and escalation paths are included in your quote
  • DeployOpen prepares evidence for compliance assessments, while independent auditors issue any attestation

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.