BAA guide
Is Google Workspace HIPAA compliant?
Plan by plan, from Google Workspace's own pages.
Only on a plan where the vendor signs a BAA. Google Workspace is not HIPAA compliant on its own. Google Workspace (organization subscription): An administrator must review and accept the BAA, and PHI may be used only in the services on Google's HIPAA Included Functionality list. Third-party apps and add-ons: no BAA.
Checked against Google Workspace's own pages, linked in the table.
Which Google Workspace plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Google Workspace (organization subscription) | BAA only if the condition is met | An administrator must review and accept the BAA, and PHI may be used only in the services on Google's HIPAA Included Functionality list. | Administrators must review and accept a BAA before using PHI in Google services.knowledge.workspace.google.com |
| Third-party apps and add-ons | No BAA | None | Third-party applications including add-ons are not included in the Included Functionality covered by the BAA.knowledge.workspace.google.com |
Rivvi
HIPAA BAA included
A HIPAA BAA is included on every plan, Free included.
Questions
Does Google sign a BAA for Google Workspace?
Yes. Google Workspace customers subject to HIPAA must enter a BAA with Google, and an administrator reviews and accepts it before using PHI in Google services.
Which Google Workspace services does the BAA cover?
Only the services on Google's HIPAA Included Functionality list. Google's current list includes Gmail, Google Drive with Docs, Sheets, Slides, Forms, and Vids, Google Calendar, Google Chat, Google Meet, Google Sites, Google Keep, Google Tasks, Google Groups, Gemini in Google Workspace, and the Gemini app, excluding Gemini in Google Chrome.
Are third-party add-ons covered by the Google Workspace BAA?
No. Google says third-party applications, including add-ons, are not part of the Included Functionality covered by the BAA.
Which Google Workspace setup should a healthcare team use with patient data?
A Google Workspace organization account whose administrator has accepted the BAA, using only the services on the HIPAA Included Functionality list. Rivvi is a free AI workspace for healthcare teams, and a HIPAA BAA is included.
Free to start. Most teams are using it the same day.
Get started for free