HIPAA-compliant alternatives to Gmail

Gmail (free) is not HIPAA compliant for patient information. The cheapest alternative in our data with a named BAA plan is Proton for Business ($6.99/mo per user).

Last verified · Ranked by our published rules: BAA clarity first, then estimated monthly cost from the vendor's own price. Commission never changes the order. How we verify

Why Gmail (free) isn't compliant

No

Google offers its HIPAA Business Associate Amendment only to Google Workspace and Cloud Identity customers, and an administrator must accept it in the Admin console. Google says customers who have not signed a BAA 'must not use PHI' in its services. A free personal Gmail account has no Admin console, so it cannot accept the BAA. Source: knowledge.workspace.google.com. Full answer: Is Gmail (free) HIPAA compliant?

Alternatives that sign a BAA

Quick picks for email

Switching checklist

  1. Pick a service that signs a BAA on the plan you'll buy, and sign the BAA before any patient email moves.
  2. Use an address on your own domain, so patients and referrers keep one address if you switch again.
  3. Point your domain's MX records to the new service; your provider's setup guide lists the exact records.
  4. Import or archive old mail that contains patient information, then stop using the free account for it.
  5. Turn on two-factor sign-in for every user, and decide how encrypted messages reach patients who don't use the same service.
  6. Update the email address on your website, intake forms and email signature.

Help me choose email

1. What do you need?
2. Who will use it?
3. What matters most?

  1. Paubox BAA plan: Standard · $32/mo per account

    Lowest estimated cost for 5 users: $32/mo (flat price, up to 5 users).

    Visit Paubox (opens in a new tab)

  2. Proton for Business BAA plan: Free · $6.99/mo per user

    Lowest estimated cost for 5 users: $34.95/mo (5 × $6.99 per user).

    Visit Proton for Business (opens in a new tab)

  3. Microsoft 365 BAA plan: Microsoft 365 Business Basic · $7/mo per user

    Lowest estimated cost for 5 users: $35/mo (5 × $7 per user).

    Visit Microsoft 365 (opens in a new tab)

Ranked by our published rules: BAA clarity first, then estimated monthly cost from the vendor's own price. Commission never changes the order. Estimates multiply per-user prices by team size (just me = 1, 2–10 = 5, 10+ = 10). Flat account prices count once, and only when the vendor states the plan covers that many users. How we verify.

Questions

Is Gmail (free) HIPAA compliant?

No. Google offers its HIPAA Business Associate Amendment only to Google Workspace and Cloud Identity customers, and an administrator must accept it in the Admin console. Google says customers who have not signed a BAA 'must not use PHI' in its services. A free personal Gmail account has no Admin console, so it cannot accept the BAA. Source: knowledge.workspace.google.com.

What is a HIPAA-compliant alternative to Gmail?

Google Workspace, Paubox, Hushmail for Healthcare, Proton for Business are in our email comparison. Of these, Proton for Business has the lowest published price with a named BAA plan ($6.99/mo per user, Free plan).

See every option in the full email comparison.

General information, not legal advice. Confirm BAA terms with the vendor before moving patient information.