BAA guide
Is Google Drive HIPAA compliant?
Plan by plan, from Google Drive's own pages.
Only on a plan where the vendor signs a BAA. Google Drive is not HIPAA compliant on its own. Google Drive in Google Workspace (including Docs, Sheets, Slides, Forms, and Vids): Only for a Google Workspace organization whose administrator has reviewed and accepted the Google Workspace BAA.
Checked against Google Drive's own pages, linked in the table.
Which Google Drive plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Google Drive in Google Workspace (including Docs, Sheets, Slides, Forms, and Vids) | BAA only if the condition is met | Only for a Google Workspace organization whose administrator has reviewed and accepted the Google Workspace BAA. | The following Google Workspace services are included in the Google Cloud BAA: ... Google Drive (including Google Docs, Google Forms, Google Photos, Google Sheets, Google Slides, and Google Vids)docs.cloud.google.com |
Rivvi
HIPAA BAA included
A HIPAA BAA is included on every plan, Free included.
Questions
Does Google sign a BAA for Google Drive?
Yes, for Google Drive in Google Workspace. Google lists Google Drive, including Docs, Sheets, Slides, Forms, and Vids, among the Google Workspace services included in the BAA.
Do we need to do anything before storing patient data in Drive?
Yes. An administrator must review and accept the Google Workspace BAA before the organization uses PHI in Google Drive.
Which Google Drive setup should a healthcare team use with patient data?
Google Drive inside a Google Workspace organization whose administrator has accepted the BAA. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free