To prevent data exfiltration from Google apps on iOS devices, you need to configure the appropriate

settings in the Google Admin console.

Navigate to Device Management:

In the Google Admin console, go to Devices > Mobile and endpoints > Universal Settings > iOS

settings.

Configure Data Protection Settings:

Find the setting for "Allow items created with managed apps to open in unmanaged apps".

Clear this checkbox to prevent users from copying data from managed (work) apps to unmanaged

(personal) apps.

Save Changes:

Save the changes to ensure that the policy is enforced.

Verification:

Verify that the policy is applied by checking the behavior on an iOS device to ensure that data cannot

be copied from managed apps to unmanaged apps or third-party applications.

By clearing this checkbox, you enforce a policy that restricts the movement of data from managed

apps to unmanaged environments, thereby preventing data exfiltration.

Reference:

Manage iOS settings

Endpoint management settings