> sounds like they put some words together to make it sound like it’s all standardized and automated and not result of human actions

Part of my job is administering a system for detecting unauthorized sharing, exporting, or printing. It has thresholds and a rules-based engine for specifying what behavior should trigger alerts. Google's system is probably custom but there are definitely products on the market for this sort of thing.