Claude vs Gemini app: which signs a HIPAA BAA?

Only Claude offers a BAA. Anthropic signs one for Claude only on Enterprise (self-serve or sales-assisted). We couldn't confirm a BAA for Gemini app from Google's own pages.

Business associate
Anthropic
Tool
Claude apps (Claude.ai)
Plans with a BAA
Enterprise (self-serve or sales-assisted)
Checked
Some plans only
Anthropic signs only for the plans listed.
Business associate
Google
Tool
Gemini app (personal Google account)
Plans with a BAA
Not stated
Checked
Not confirmed
No BAA offer found on Google's own pages.

Side by side

ClaudeAnthropicGemini appGoogle
BAASome plans onlyNot confirmed
Plans with a BAAEnterprise (self-serve or sales-assisted)Not stated
How to get itAccept or sign online—
AI features outside the BAA partly covered excluded
  • File creation and code execution (Partly covered)
  • Claude Code (terminal via Enterprise sign-in, Desktop tab) and Cowork in Claude Desktop, local mode (Partly covered)
  • Claude Code on web/cloud/mobile, Remote Control, Cowork in the cloud, Code Review, Security, computer use (Excluded from the BAA)
  • Claude Code VS Code / JetBrains extensions, gateway or custom base URL setups, and Claude Code via Bedrock / Agent Platform / Foundry (Excluded from the BAA)
  • MCP servers and connectors, Enterprise Search, Claude in Chrome, Skills (Excluded from the BAA)
  • Beta features (Claude in Office, Claude Design, Claude Slides, Claude Docs) (Excluded from the BAA)
None listed
Sources4 sources3 sources
Last checkedOct 11, 2026Oct 12, 2026

Every plan

Claude

  • Free / Pro / MaxAnthropic says individual plans can't enable HIPAA, and its API docs list consumer products as outside HIPAA coverage.No BAA
  • TeamAnthropic says Team plans can't enable HIPAA.No BAA
  • Enterprise (self-serve or sales-assisted)Only the Primary Owner can accept the BAA, under Organization settings > Data and privacy > HIPAA Compliance, with no sales or legal cycle needed. Standard Enterprise has no BAA coverage until this is done. To cover Claude Code and Cowork (local mode), the separate HIPAA configuration must be applied, and it cannot be removed afterward.Signs a BAA

Gemini app

  • Personal Google account (free or paid Google AI subscription)Google's HIPAA pages describe BAA coverage only for Google Workspace and Google Cloud customers. They list the Gemini App as a Workspace service but say nothing about personal accounts. The Gemini Apps Privacy Hub says a subset of chats is reviewed by humans and asks users not to enter confidential information. Google never says outright that it won't sign a BAA here, so the verdict is unknown rather than no.Not confirmed

If you handle patient data

Use Claude on a plan listed above, and sign the BAA before anyone enters protected health information. Don't put PHI into Gemini app unless Google gives you a BAA in writing. Other Gemini app alternatives that sign a BAA

More comparisons

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.