DeepL vs Google Cloud Translation: which signs a HIPAA BAA?
Only Google Cloud Translation offers a BAA. We couldn't confirm a BAA for DeepL from DeepL's own pages. Google Cloud signs a BAA for Google Cloud Translation on all the plans we list.
- Business associate
- DeepL
- Tool
- DeepL
- Plans with a BAA
- Not stated
- Checked
- Business associate
- Google Cloud
- Tool
- Google Cloud Translation
- Plans with a BAA
- Google Cloud customers (with a Services Agreement)
- Checked
Google Cloud Translation: plan-by-plan breakdown and sources
Side by side
| DeepLDeepL | Google Cloud TranslationGoogle Cloud | |
|---|---|---|
| BAA | Not confirmed | Signs a BAA |
| Plans with a BAA | Not stated | Google Cloud customers (with a Services Agreement) |
| How to get it | — | Accept or sign online |
| AI features outside the BAA partly covered excluded | None listed |
|
| Sources | 6 sources | 4 sources |
| Last checked | Oct 13, 2026 | Oct 13, 2026 |
Plan by plan
DeepL
- DeepL Pro and Enterprise (Translator apps, Write)DeepL's May 2025 press release, healthcare page, HIPAA blog post and trust center all say DeepL meets HIPAA requirements. None mention a BAA, how to get one, or which plans qualify. Pro texts are deleted once translated and not used for training. The healthcare page and blog point to Contact Sales.Not confirmed
- DeepL API ProThe HIPAA blog post says the API runs on the same security stack as the apps but does not mention a BAA. The privacy policy treats API Pro like Pro: texts are deleted after processing and not used for training.Not confirmed
- DeepL Free and DeepL API FreeThe privacy policy says texts entered into the free translator are kept for a limited time and used to train DeepL's models. No page says a BAA is available on free use, and the HIPAA pages do not mention free use either.Not confirmed
Google Cloud Translation
- Google Cloud customers (with a Services Agreement)Accept the BAA on the IAM & Admin privacy page in any one project, unless your agreement already includes it. A Services Agreement must already be in place. Do not use pre-GA offerings with PHI. Customers who buy through an unaffiliated reseller are covered by their reseller agreement, not Google's BAA.Signs a BAA
If you handle patient data
Use Google Cloud Translation on a plan listed above, and sign the BAA before anyone enters protected health information. Don't put PHI into DeepL unless DeepL gives you a BAA in writing. Other DeepL alternatives that sign a BAA
More comparisons
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.