Is Google Workspace Gmail HIPAA compliant?

Yes, with a signed BAA

Gmail is on Google's list of 'Included Functionality' under the Google Workspace HIPAA BAA, which an admin accepts in the Admin console. Third-party add-ons and 'Additional Google Services' are not covered, and customers must still configure the service appropriately.

What to use instead

Sources

• support.google.com/a/answer/3407054
• workspace.google.com/terms/2015/1/hipaa_functionality/

Last verified 2026-09-24. General information, not legal advice.