Claude vs Gemini app: which signs a HIPAA BAA?
Only Claude offers a BAA. Anthropic signs one for Claude only on Enterprise (self-serve or sales-assisted). We couldn't confirm a BAA for Gemini app from Google's own pages.
- Business associate
- Anthropic
- Tool
- Claude apps (Claude.ai)
- Plans with a BAA
- Enterprise (self-serve or sales-assisted)
- Checked
Some plans only
- Business associate
- Tool
- Gemini app (personal Google account)
- Plans with a BAA
- Not stated
- Checked
Not confirmed
Side by side
| ClaudeAnthropic | Gemini appGoogle | |
|---|---|---|
| BAA | Some plans only | Not confirmed |
| Plans with a BAA | Enterprise (self-serve or sales-assisted) | Not stated |
| How to get it | Accept or sign online | — |
| AI features outside the BAA partly covered excluded |
| None listed |
| Sources | 4 sources | 3 sources |
| Last checked | Oct 11, 2026 | Oct 12, 2026 |
Every plan
Claude
- Free / Pro / MaxAnthropic says individual plans can't enable HIPAA, and its API docs list consumer products as outside HIPAA coverage.No BAA
- TeamAnthropic says Team plans can't enable HIPAA.No BAA
- Enterprise (self-serve or sales-assisted)Only the Primary Owner can accept the BAA, under Organization settings > Data and privacy > HIPAA Compliance, with no sales or legal cycle needed. Standard Enterprise has no BAA coverage until this is done. To cover Claude Code and Cowork (local mode), the separate HIPAA configuration must be applied, and it cannot be removed afterward.Signs a BAA
Gemini app
- Personal Google account (free or paid Google AI subscription)Google's HIPAA pages describe BAA coverage only for Google Workspace and Google Cloud customers. They list the Gemini App as a Workspace service but say nothing about personal accounts. The Gemini Apps Privacy Hub says a subset of chats is reviewed by humans and asks users not to enter confidential information. Google never says outright that it won't sign a BAA here, so the verdict is unknown rather than no.Not confirmed
If you handle patient data
Use Claude on a plan listed above, and sign the BAA before anyone enters protected health information. Don't put PHI into Gemini app unless Google gives you a BAA in writing. Other Gemini app alternatives that sign a BAA
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.