Google Cloud Vertex AI and Gemini Enterprise: HIPAA status
Google's AI platform and Gemini Enterprise on Google Cloud. Both are among the products covered by Google Cloud's HIPAA BAA.
Google Cloud Vertex AI and Gemini Enterprise signs a Business Associate Agreement. Gemini Enterprise and Generative AI on Google Cloud are listed among products covered by the Google Cloud BAA.
Source: Google Cloud — HIPAA compliance on Google Cloud and Google Workspace · checked
Google Cloud Vertex AI and Gemini Enterprise and HIPAA at a glance
Google Cloud Vertex AI and Gemini Enterprise signs a Business Associate Agreement. A BAA alone does not make its use HIPAA compliant: you still need to accept the Google Cloud BAA following Google's Privacy Compliance and Records guide, and use only products on Google's covered list for PHI and configure them securely. Facts checked against Google's own documentation on 2026-10-06.
| Signs a BAA | Yes |
|---|---|
| How you get it | Gemini Enterprise and Generative AI on Google Cloud are listed among products covered by the Google Cloud BAA. |
| You still need to | Accept the Google Cloud BAA following Google's Privacy Compliance and Records guide. |
| Main limitation | You remain responsible for evaluating your own HIPAA compliance and securing what you build. |
| Last checked | 2026-10-06 |
BAA details
What you still have to configure
- Accept the Google Cloud BAA following Google's Privacy Compliance and Records guide. source
- Use only products on Google's covered list for PHI and configure them securely. source
Limitations
- You remain responsible for evaluating your own HIPAA compliance and securing what you build. source
Against our criteria
| BAA without a sales process | Not verified | Not verified yet |
|---|---|---|
| Covers a ready-to-use chat app | Yes — Gemini Enterprise is on the covered list. | Google Cloud — HIPAA compliance on Google Cloud and Google Workspace |