Amazon Transcribe vs Google Cloud Speech-to-Text: which signs a HIPAA BAA?
Both can be covered by a BAA, on different terms. Amazon Web Services signs one for Amazon Transcribe only on AWS accounts (Sign up for AWS, advanced). Google Cloud signs a BAA for Google Cloud Speech-to-Text on every plan we list.
- Business associate
- Amazon Web Services
- Tool
- Amazon Transcribe (incl. Transcribe Medical)
- Plans with a BAA
- AWS accounts (Sign up for AWS, advanced)
- Checked
- Business associate
- Google Cloud
- Tool
- Google Cloud Speech-to-Text
- Plans with a BAA
- Google Cloud customers (with a Services Agreement)
- Checked
Google Cloud Speech-to-Text: plan-by-plan breakdown and sources
Side by side
| Amazon TranscribeAmazon Web Services | Google Cloud Speech-to-TextGoogle Cloud | |
|---|---|---|
| BAA | Some plans only | Signs a BAA |
| Plans with a BAA | AWS accounts (Sign up for AWS, advanced) | Google Cloud customers (with a Services Agreement) |
| How to get it | Accept or sign online | Accept or sign online |
| AI features outside the BAA partly covered excluded | None listed |
|
| Sources | 7 sources | 4 sources |
| Last checked | Oct 12, 2026 | Oct 12, 2026 |
Every plan
Amazon Transcribe
- AWS accounts (Sign up for AWS, advanced)Customers review and accept the AWS BAA in AWS Artifact in the AWS Management Console. The BAA is accepted per account, or for multiple accounts in an organization. PHI should only go into the HIPAA-eligible services named on AWS's list, which includes Transcribe.Signs a BAA
- AWS accounts created with the new sign-up experienceAWS tells customers with HIPAA workloads not to use the new sign-up experience, and these accounts cannot be designated as HIPAA accounts. Upgrading to a paid plan does not change that. AWS mentions a separate way to activate advanced features, which was not researched.No BAA
Google Cloud Speech-to-Text
- Google Cloud customers (with a Services Agreement)Accept the BAA on the IAM & Admin privacy page in any one project, unless your agreement already includes it. A Services Agreement must already be in place. Do not opt in to data logging, and do not use pre-GA offerings with PHI. Customers who buy through an unaffiliated reseller are not covered by Google's BAA terms; their reseller agreement governs.Signs a BAA
If you handle patient data
Either can work. Choose on features and price, then make sure you’re on a plan listed above and the BAA is signed before anyone enters protected health information. Keep PHI out of the AI features listed as outside the BAA.
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.