BAA guide
Is Google Workspace HIPAA compliant?
Plan by plan, from Google's own pages.
Only on a plan where the vendor signs a BAA. Google Workspace is not HIPAA compliant on its own. Google Workspace (organization subscription): An administrator must review and accept the BAA, and PHI may be used only in the services on Google's HIPAA Included Functionality list. Third-party apps and add-ons: no BAA.
Checked against Google Workspace's own pages, linked in the table.
Which Google Workspace plans sign a BAA
| Plan | BAA | Condition | What the vendor page says |
|---|---|---|---|
| Google Workspace (organization subscription) | BAA only if the condition is met | An administrator must review and accept the BAA, and PHI may be used only in the services on Google's HIPAA Included Functionality list. | Administrators must review and accept a BAA before using PHI in Google services.knowledge.workspace.google.com |
| Third-party apps and add-ons | No BAA | None | Third-party applications including add-ons are not included in the Included Functionality covered by the BAA.knowledge.workspace.google.com |
Rivvi
HIPAA BAA included
Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA, e-signed in the app before any patient data moves. The free personal plan is public information only.
Questions
Does Google sign a BAA for Google Workspace?
Yes. Google Workspace customers subject to HIPAA must enter a BAA with Google, and an administrator reviews and accepts it before using PHI in Google services.
Which Google Workspace services does the BAA cover?
Only the services on Google's HIPAA Included Functionality list. Google's current list includes Gmail, Google Drive with Docs, Sheets, Slides, Forms, and Vids, Google Calendar, Google Chat, Google Meet, Google Sites, Google Keep, Google Tasks, Google Groups, Gemini in Google Workspace, and the Gemini app, excluding Gemini in Google Chrome.
Are third-party add-ons covered by the Google Workspace BAA?
No. Google says third-party applications, including add-ons, are not part of the Included Functionality covered by the BAA.
Which Google Workspace setup does Google cover for patient data?
Google says an administrator must accept the BAA, and PHI may be used only in the services on its HIPAA Included Functionality list. Rivvi is an AI workspace for healthcare teams. Rivvi's free organization plan (you and 2 colleagues) includes a HIPAA BAA.
Related
- Is Microsoft 365 HIPAA compliant?
- Is Notion HIPAA compliant?
- Is Smartsheet HIPAA compliant?
- Is Airtable HIPAA compliant?
- Is Asana HIPAA compliant?
- Is monday.com HIPAA compliant?
- BAA directory: every tool Rivvi checked
- What makes a chatbot HIPAA compliant
- HIPAA compliant AI: which tools sign a BAA
- Check another AI tool against its BAA terms
Source: Google's own pages, linked in the table. Checked . Last updated . How Rivvi sources data. Spot an error? hello@rivvi.ai.
Free to start. Most teams are using it the same day.
Get started for free