Is Google Workspace HIPAA Compliant for Therapists?
Quick Answer
Yes, but only on a paid Google Workspace plan with the HIPAA amendment signed — not on free, personal Gmail accounts. Gmail, Calendar, Drive, Meet, and Chat all appear on Google's official list of HIPAA-covered Workspace services. Google does not publish one single minimum plan tier on its main terms page, so confirm current plan eligibility directly with Google before relying on it.
Written & fact-checked by the Therapy HIPAA Hub editorial team — see our editorial standards.
Verified August 2026 against Google Workspace's official HIPAA-covered services list
BAA Available?
Yes
On Which Plan
Paid Workspace editions — confirm current tier eligibility with Google
Sign the HIPAA amendment inside your Workspace Admin Console before using any Google service for client data, and restrict your practice's use to the specific list of covered services Google publishes — newer features, including some AI tools, may sit outside that list even on a fully compliant account.
What to Use Instead for Client Work
If managing an Admin Console and tracking Google's covered-services list feels like more overhead than you want, SimplePractice bundles HIPAA-compliant email-equivalent messaging, calendar, and file storage inside one platform with the BAA already in force.
Affiliate link — we may earn a commission at no extra cost to you.
Personal Gmail Is Never Covered
The free @gmail.com account most people already have is completely excluded from Google's HIPAA program. Compliance requires the paid, business-tier Google Workspace product with a specifically signed HIPAA amendment — this is a business decision and a contract signature, not a feature you can toggle on inside a free account.
Covered Services vs. Everything Else
Once you have a compliant Workspace plan and signed BAA, Google's protection extends only to the services on its published list — Gmail, Calendar, Drive, Meet, and Chat are confirmed, but Google's newer AI-driven features are not guaranteed to be included, and the list can be updated by Google over time. Treat any new Google feature as unverified for PHI until you confirm it against the current list.
Trusted by 225,000+ Therapists
50% Off Your First 4 Months of SimplePractice
SimplePractice is the #1 HIPAA-compliant practice management platform for therapists. Includes a signed BAA, encrypted messaging, telehealth, and full insurance billing.
Limited-time summer offer · No credit card required for trial
Need HIPAA-compliant email only? See Hushmail for Healthcare →
FAQ — Google Workspace and HIPAA
Which Google Workspace plan includes a HIPAA BAA?
Google's terms confirm the BAA is available on paid Workspace editions but do not name one single required tier on their main page — verify current eligibility for your specific plan directly with Google before relying on it for client data.
Is Gmail HIPAA-compliant if I use it for my private practice?
Only if it is part of a paid Google Workspace subscription with the HIPAA amendment signed — a free personal @gmail.com account is never compliant, regardless of how it's used.
Does the Google Workspace BAA cover Google's AI features like Gemini?
Not necessarily. Google publishes a specific list of HIPAA-covered services, and newer AI features are not automatically guaranteed to be on it. Check Google's current list before using any AI tool with client data.