https://cloud.google.com/compute/docs/instances/nested-virtu...
Compute Engine VMs run on a physical host that has Google's security-hardened, KVM-based hypervisor.