BAA guide
Is Gmail HIPAA compliant?
Plan by plan, from Google's own pages.
Only on a plan where the vendor signs a BAA. Gmail is not HIPAA compliant on its own. Gmail in Google Workspace and Gemini features in Gmail (Help me write, contextual smart replies, side panel): Only for a Google Workspace organization whose administrator has reviewed and accepted the Google Workspace BAA.
Checked against Gmail's own pages, linked in the table.
Which Gmail plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Gmail in Google Workspace | BAA only if the condition is met | Only for a Google Workspace organization whose administrator has reviewed and accepted the Google Workspace BAA. | The following Google Workspace services are included in the Google Cloud BAA: AppSheet Cloud Identity Management Gemini App (excluding Gemini in Google Chrome) Gemini in Google Workspace Gemini Mac App Gmaildocs.cloud.google.com |
| Gemini features in Gmail (Help me write, contextual smart replies, side panel) | BAA only if the condition is met | Only for a Google Workspace organization whose administrator has reviewed and accepted the Google Workspace BAA. | The help me write, contextual smart replies, and side-panel features are covered as part of Google Workspace with Gemini in HIPAA Included Functionality.knowledge.workspace.google.com |
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does Google sign a BAA for Gmail?
Yes, for Gmail in Google Workspace. Gmail is on Google's list of Google Workspace services included in the BAA, and an administrator must accept the BAA before the organization uses PHI.
Are Gmail's Gemini features covered?
Google says Help me write, contextual smart replies, and the side panel in Gmail are covered as part of Google Workspace with Gemini in the HIPAA Included Functionality.
Which Gmail setup does Google cover for patient data?
Google covers Gmail inside a Google Workspace organization whose administrator has accepted the Google Workspace BAA. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.
Related
- Is Zoom HIPAA compliant?
- Is Google Drive HIPAA compliant?
- Is Microsoft Teams HIPAA compliant?
- Is Microsoft 365 HIPAA compliant?
- Is Dropbox HIPAA compliant?
- Is Slack HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Google's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free