BAA guide

Is Google Forms HIPAA compliant?

Plan by plan, from Google's own pages.

Only on a plan where the vendor signs a BAA. Google Forms is not HIPAA compliant on its own. Google Forms in Google Workspace: Google says an administrator must review and accept the BAA before the organization uses PHI in Google services.

Checked October 23, 2026 against Google Forms's own pages, linked in the table.

Which Google Forms plans sign a BAA

Plan	BAA	Condition	What the vendor page says
Google Forms in Google Workspace	BAA only if the condition is met	Google says an administrator must review and accept the BAA before the organization uses PHI in Google services.	The following Google Workspace services are included in the Google Cloud BAA: ... Google Drive (including Google Docs, Google Forms, Google Photos, Google Sheets, Google Slides, and Google Vids)docs.cloud.google.com

Rivvi

HIPAA BAA included

Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.

Questions

Does Google sign a BAA for Google Forms?

Yes, for Google Forms in Google Workspace. Google lists Google Drive, including Google Forms, among the Google Workspace services included in the Google Cloud BAA.

What has to happen before a team collects PHI with Google Forms?

Google says administrators must review and accept a BAA before using PHI in Google services. Google also says customers who have not signed a BAA with Google must not use PHI in Google Workspace.

Are Google Forms add-ons covered by the BAA?

No. Google says third party applications, including add-ons, are not included in the functionality covered by the BAA.

Source: Google's own pages, linked in the table. Checked October 23, 2026. Last updated October 23, 2026. How Rivvi sources data. Spot an error? hello@rivvi.ai.

Free to start. Most teams are using it the same day.

Get started for free