Is Gemini HIPAA compliant?
Google's BAA covers the Gemini app and Gemini in Workspace for Google Workspace customers. Gemini in Chrome is left out.
- Maker
- Google LLC
- Last checked
- November 11, 2026
Plan by plan
A business associate agreement (BAA) is the contract HIPAA requires before a tool handles patient information.
| Plan | BAA available | Detail |
|---|---|---|
| Gemini app with a personal Google account | No | Google offers its BAA to Google Workspace and Cloud Identity customers. A personal account is neither. |
| Gemini app in Google Workspace | Yes | Covered once a Workspace administrator accepts the BAA in the Admin console. |
| Gemini in Google Workspace (Gmail, Docs, Meet and other apps) | Yes | Covered under the Workspace BAA. |
| Gemini in Chrome | No | Google says it is not covered by the BAA. |
| Gemini Enterprise on Google Cloud | Yes | Listed among the Google Cloud products covered by the Google Cloud BAA. |
What that means in practice
Gemini comes under a BAA through Google Workspace. A Workspace administrator reviews and accepts the BAA in the Admin console, under Account settings, then Legal and compliance. Google says Gemini, meaning the Gemini app and Gemini in Google Workspace, can support HIPAA workloads under that agreement.
Gemini in Chrome is the exception. Google says it is not covered by the BAA.
A personal Google account is a different case. The BAA is offered to Google Workspace and Cloud Identity customers, so the Gemini app on a personal account is not covered.
Organizations that use Gemini through Google Cloud work under the Google Cloud BAA, which lists Gemini Enterprise among its covered products.
What the agreement leaves out
Gemini in Chrome is not covered. Google also says third party applications and add ons are outside the BAA, as are the services it calls Additional Google Services.
How to read this answer
HIPAA has no certificate a product can hold. The part that can be checked is whether the maker signs a business associate agreement, and for which plans.
A signed agreement is where compliant use starts. The practice still has to set the tool up correctly, control who can use it, and train staff.
This page records what Google LLC documents. It is not legal advice. See the regulatory compliance guide or the HIPAA status of other AI tools.