Google Cloud: HIPAA status
Google's cloud platform. Google signs a BAA covering its infrastructure and a published list of supported products.
Signs a BAAYes
Google Cloud signs a Business Associate Agreement. Google Cloud BAA covers its infrastructure in all regions and a published list of supported products.
Source: Google Cloud — HIPAA compliance on Google Cloud and Google Workspace · checked
Google Cloud and HIPAA at a glance
Google Cloud signs a Business Associate Agreement. A BAA alone does not make its use HIPAA compliant: you still need to accept the Google Cloud BAA following Google's Privacy Compliance and Records guide, and use only products on the covered list for PHI and secure your environment and applications. Facts checked against Google's own documentation on 2026-10-06.
| Signs a BAA | Yes |
|---|---|
| How you get it | Google Cloud BAA covers its infrastructure in all regions and a published list of supported products. |
| You still need to | Accept the Google Cloud BAA following Google's Privacy Compliance and Records guide. |
| Main limitation | You remain responsible for evaluating your own HIPAA compliance and configuring what you build. |
| Last checked | 2026-10-06 |
BAA details
What you still have to configure
- Accept the Google Cloud BAA following Google's Privacy Compliance and Records guide. source
- Use only products on the covered list for PHI and secure your environment and applications. source
Limitations
- You remain responsible for evaluating your own HIPAA compliance and configuring what you build. source
Against our criteria
| BAA without a sales process | Not verified | Not verified yet |
|---|---|---|
| Safeguards managed for you | No — Infrastructure: you configure and secure your environment. | Google Cloud — HIPAA compliance on Google Cloud and Google Workspace |