Is Gemini in Google Workspace HIPAA compliant?
Google's Gemini assistant for Workspace customers — the Gemini app and Gemini inside Gmail, Docs and other apps — covered by the Workspace HIPAA BAA. Gemini in Chrome is excluded.
Gemini in Google Workspace signs a Business Associate Agreement only under specific conditions. The Gemini app (excluding Gemini in Chrome), the Gemini Mac app and Gemini in Workspace are on Google's HIPAA included functionality list for Workspace customers with the BAA.
A BAA alone does not make its use HIPAA compliant: set it up as described under What to configure, and cover it in your risk analysis.
Source: Google — HIPAA compliance on Google Cloud and Workspace (list last updated August 31, 2025) · checked
Choosing a tool is one part of HIPAA. See everything you need to have in place → · Managing several vendors? Free Vendor & BAA Register →
BAA details
| Signs a BAA | Conditional | Google — HIPAA compliance on Google Cloud and Workspace (list last updated August 31, 2025) |
|---|---|---|
| Plans that include a BAA | Workspace editions eligible for Google's HIPAA BAA | Google — HIPAA compliance on Google Cloud and Workspace (list last updated August 31, 2025) |
What you still have to configure
- Accept Google's HIPAA BAA in the Workspace Admin console before using Gemini with PHI. source
- Make sure staff sign in with their managed Workspace account, not a personal Google account. source
Limitations
- Gemini in Chrome is excluded. source
- Consumer Gemini used with personal Google accounts is not covered. source
- Only the services on Google's list are covered; check it before using new Gemini features with PHI. source
Against our criteria
| BAA without a sales process | Yes — Accepted in the Admin console. | Google — HIPAA compliance on Google Cloud and Workspace (list last updated August 31, 2025) |
|---|---|---|
| Covers a ready-to-use chat app | Yes — Gemini app and Gemini in Workspace. | Google — HIPAA compliance on Google Cloud and Workspace (list last updated August 31, 2025) |
Alternatives
- Amazon Bedrock →BAA: yes
- Azure OpenAI (Microsoft Foundry) →BAA: yes
- BastionGPT →BAA: yes
- ChatGPT (Free, Go, Plus, Pro and Business) →BAA: no
- ChatGPT for Clinicians →BAA: conditional
- ChatGPT for Healthcare and Enterprise →BAA: conditional
- Claude (Anthropic) →BAA: conditional
- CompliantChatGPT →BAA: yes
- Google Cloud Vertex AI and Gemini Enterprise →BAA: yes
- Microsoft 365 Copilot →BAA: conditional
- OpenAI API →BAA: conditional