Are Gemini Code Assist's AI features covered by the BAA?

Code completion, chat and agent mode in the IDE (Standard / Enterprise): covered by the baa. Gemini Code Assist on GitHub (code review): excluded from the baa.

Is Gemini Code Assist HIPAA compliant?

Q: Does Gemini Code Assist sign a HIPAA BAA?

Only on some plans or setups. Gemini Code Assist is on Google Cloud's list of services covered by its click-to-accept HIPAA BAA, for the Standard and Enterprise editions bought through Google Cloud. Google says its certifications do not apply to Gemini Code Assist on GitHub. The free individual tier stopped serving requests in June 2026.

Only on the right plan. Google Cloud signs a Business Associate Agreement for Gemini Code Assist on Standard / Enterprise (Google Cloud). Other plans aren't covered, so keep patient data out of them.

Does Gemini Code Assist sign a BAA?

Only on some plans or setups

Gemini Code Assist is on Google Cloud's list of services covered by its click-to-accept HIPAA BAA, for the Standard and Enterprise editions bought through Google Cloud. Google says its certifications do not apply to Gemini Code Assist on GitHub. The free individual tier stopped serving requests in June 2026.

Based on 6 sources, all from Google Cloud unless marked.

Not fully covered by the BAA: Gemini Code Assist on GitHub (code review).

Business associate: Google Cloud
Tool: Gemini Code Assist
Plans with a BAA: Standard / Enterprise (Google Cloud)
Checked: Oct 13, 2026

Some plans only

Google Cloud signs only for the plans listed.

By plan

Plan	BAA	How to get it	Conditions
Standard / Enterprise (Google Cloud)	Signs a BAA	Accept or sign onlineRequest page	Gemini Code Assist is on Google Cloud's HIPAA supported-services list with no footnote. The Google Cloud BAA takes effect when the customer clicks to accept it, requires an existing Google Cloud services agreement, and covers only listed services. Google's certifications page marks the product HIPAA compliant.[1],[2],[3]
Gemini Code Assist on GitHub	No BAA	Not offered	Google's certifications page says the certifications, HIPAA included, do not apply to Gemini Code Assist on GitHub. The consumer version of the GitHub app is deprecated.[3],[4]
Gemini Code Assist for individuals (discontinued)	Not confirmed	Not stated	Google stopped serving IDE requests for the free individual tier and Google AI Pro and Ultra on June 18, 2026. Google published no BAA route for these consumer tiers.[4],[5]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Google Cloud says about each one.

AI feature	Under the BAA	Details
Code completion, chat and agent mode in the IDE (Standard / Enterprise)Standard / Enterprise (Google Cloud)	Covered	Gemini Code Assist appears on the HIPAA supported-services list with no feature-level exclusions.[1],[3]
Gemini Code Assist on GitHub (code review)Gemini Code Assist on GitHub	Excluded	Google says its certifications do not apply to the GitHub integration.[3]

AI coding tools that offer a BAA

Augment CodeBAA on: EnterpriseSome plans only
Claude CodeBAA on: Claude Console API key (Commercial org) with zero data retention, Claude Enterprise (HIPAA-ready)Some plans only
CursorBAA on: EnterpriseSome plans only
OpenAI CodexBAA on: ChatGPT for Healthcare / ChatGPT for Clinicians / Enterprise or Edu with Regulated Workspace, OpenAI API (API key sign-in) with Modified RetentionSome plans only

All BAA-ready alternatives to Gemini Code Assist

Compare Gemini Code Assist

Gemini Code Assist vs GitHub CopilotGitHub Copilot: no BAA

Sources

HIPAA compliance on Google Cloud and Google WorkspaceGoogle Cloud, Trust center. Checked Oct 13, 2026. Archived copy
Google Cloud Platform HIPAA Business Associate AddendumGoogle Cloud, Legal terms. Checked Oct 13, 2026. Archived copy
Gemini Code Assist certifications and securityGoogle Cloud, Documentation. Checked Oct 13, 2026. Archived copy
Gemini Code Assist terms of service and privacy noticesGoogle, Legal terms. Checked Oct 13, 2026. Archived copy
Gemini Code Assist for individuals privacy noticeGoogle, Legal terms. Checked Oct 13, 2026. Archived copy
Gemini Code Assist Standard and Enterprise overviewGoogle Cloud, Documentation. Checked Oct 13, 2026. Archived copy

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.