Ethical Stack

Gemini CLI

Open-source command-line coding agent connecting a terminal workspace to Google Gemini services or supported API backends.

Score calculation

(5 + 9 + 4 + 3) ÷ 4 = 5.3

4 of six dimensions rated. Unrated dimensions and BDS status are excluded.

Full scoring method ↗
Setup details

Privacy terms vary with Google-account, Gemini API, or Vertex AI authentication; Google contracts do not establish this CLI deployment.

Energy

↑

Gemini CLI does not publish service-specific energy or water data; the model and serving provider determine most inference impact.

Reasoning & sources

Gemini CLI routes requests through Code Assist, Gemini API, or Vertex AI according to the login method. A Vertex region may offer a clearer infrastructure boundary, but the CLI’s terms page gives no energy data for the service. Select a region and model with substantiated emissions reporting if that is part of your purchasing test.

No per-task electricity, water, or emissions data, serving-region breakdown, or lifecycle assessment was found for the harness.

Training rights

↑

Gemini CLI is a harness that connects to models; its sources do not establish a complete rights record for the training data of every model it can use.

Reasoning & sources

Gemini CLI routes through Google Code Assist, Gemini API, or Vertex AI depending on authentication. Those paths have different terms, but none of the cited CLI documentation is a complete source-level rights ledger for Gemini models. Pick a paid/enterprise path with suitable data controls and ask Google for model-specific provenance if permission is a hard requirement.

The provider and exact model vary by configuration; no complete rights ledger can be inferred from the harness license or provider list.

Privacy

↑

Gemini CLI applies the privacy terms of the chosen sign-in path: Code Assist, Gemini API, or Vertex AI.

Reasoning & sources

The CLI is the same front end but the data rules change with authentication and paid/unpaid service. Choose enterprise Vertex/Code Assist only if its terms fit your needs, and review the consumer API policy separately.

Plan, selected model/provider, enabled features, and deployment mode can change this assessment.

Openness

↑

Gemini CLI software is Apache-2.0; the backend model and service terms are separate.

Reasoning & sources

The Gemini CLI repository is Apache-2.0, so its client code can be inspected and modified. The Gemini model and hosted services remain governed by separate terms. Open client code does not establish access to model weights or training data.

This score covers the harness/editor source only; hosted services, models, data, or enterprise features may remain proprietary.

Worker treatment

↑

Google’s supplier code applies labor and human-rights requirements across direct, temporary, migrant, contract, and subcontracted workers; it allows audits, requires remediation, and sets a 60-hour weekly limit with stated exceptions. This is a supplier policy, not an audit of AI data workers.

Reasoning & sources

Google publishes broad supplier protections and audit rights, but this review found no worker-level results for AI data work. This is relevant when deciding whose business to support, while pay and working conditions for the team behind Gemini CLI remain unestablished. Ask for current worker outcomes for that team and its suppliers.

Google’s Supplier Code covers vendors and subcontractors and describes audit rights, but does not report conditions for workers who prepared the models behind Gemini CLI. The policy is a baseline expectation rather than proof of current worker outcomes. Ask Google for model-specific vendors, wages, safety support, and audit findings.

Google publishes broad supplier protections and audit rights, but this review found no worker-level results for AI data work. This rating describes the company relationship or supplier policy, not a finding about this particular product’s use.

Working conditions for the people building or supporting Gemini CLI are not established by this company-wide record. No current AI-annotation-specific outcomes, public audit findings, or remediation data for Vertex-related data work were established.

Government & military

↑

Google documents access for Department of War personnel and classified defense workflows. Separately, Israel’s procurement administration identifies Google as a Nimbus public-cloud provider; AFSC and Who Profits describe military/security use, while the Guardian reports contract terms limiting service withdrawal. These sources do not establish Google’s role in a particular attack.

Reasoning & sources

Google documents U.S. Department of War and classified defense workflows; Israel’s procurement record identifies Google as a Nimbus cloud provider, and independent research/reporting describes military or security use and limits on withdrawal. The reviewed evidence does not attribute a specific harmful operation to Google. This is relevant when deciding whose business to support. Deployment of Gemini CLI or this particular model release under those contracts remains unestablished; consider the company relationship separately from the product’s actual use.

Google Public Sector announced a DoD CDAO contract with a $200 million ceiling. The announcement establishes a parent-company defense relationship but does not identify Gemini CLI or its model service as the deployed tool. Buyers can ask which Google services and workloads the contract covers.

Google documents U.S. Department of War and classified defense workflows; Israel’s procurement record identifies Google as a Nimbus cloud provider, and independent research/reporting describes military or security use and limits on withdrawal. The reviewed evidence does not attribute a specific harmful operation to Google. This rating describes the company relationship or supplier policy, not a finding about this particular product’s use.

Deployment of Gemini CLI under these contracts is not established. The source does not disclose contract terms or evaluate downstream deployment outcomes.

BDS status

↑

Google / Alphabet is named as a pressure target in the BNC’s official campaign sources. The product is developed or supplied by Google / Alphabet.

Reasoning & sources

If following this BNC campaign is a requirement, consider alternatives to paid Google / Alphabet products where practical. Check the model and host this tool connects to as well as the company providing the tool. This label follows the named company’s campaign status; it does not claim that BDS separately reviewed this exact product.

This review covers the named targets in the BNC consumer/pressure guide and No Tech campaign, not every BDS campaign, local group, investment or supplier. Lists and ownership can change. A company’s absence from these lists is not an endorsement or proof that it has no relevant relationships.

Israel’s procurement administration says Google was selected with AWS for Nimbus public-cloud services and lists the Ministry of Defense and IDF among project partners. The Guardian’s investigation of leaked agreement documents reports that Nimbus terms limited Google’s ability to suspend service, including after alleged policy violations. Who Profits and AFSC describe cloud and AI use by military/security bodies, including surveillance-related capabilities; these are attributed research claims, not proof of Google’s role in a specific attack. Both companies denied circumventing legal obligations in response to the Guardian investigation.

How Gemini CLI is used in this relationship is not established. The government record establishes the contract and project participants; the investigative reporting describes contract controls, and research organizations make broader use claims. The reviewed evidence does not establish Google’s contribution to a particular operation, injury, or other specific harm.

All sources

Side by side