Does Gemini for Google Workspace sign a BAA?
Yes, it signs a BAA
Google Workspace admins can accept a HIPAA BAA in the Admin console. Google's BAA service list includes 'Gemini in Google Workspace' and the Gemini app, but excludes Gemini in Chrome and Gemini Notebook (NotebookLM).
Not fully covered by the BAA: Gemini in Chrome; Gemini Notebook (formerly NotebookLM).
- Business associate
- Tool
- Gemini for Google Workspace
- Plans with a BAA
- Google Workspace (editions that include Gemini), BAA accepted by admin
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Google Workspace (editions that include Gemini), BAA accepted by admin | Signs a BAA | Accept or sign online | A super admin reviews and accepts the BAA under Admin console > Account settings > Legal and compliance. Only services on the HIPAA Included Functionality list are covered. The pages checked do not say which editions are eligible.[1],[2] |
| Personal Google account / consumer Google AI plans | Not confirmed | Not stated | Google describes BAA acceptance only for Workspace admins in the Admin console. The pages checked describe no BAA route for personal accounts.[1] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Google says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Gemini in Gmail (Help me write, contextual smart replies, side panel)Google Workspace (editions that include Gemini), BAA accepted by admin | Covered | Google's HIPAA help article names these features as covered under Google Workspace with Gemini in Included Functionality.[1] |
| Gemini in Google Workspace apps (Docs, Sheets, Slides, Drive, Meet, Chat side panel)Google Workspace (editions that include Gemini), BAA accepted by admin | Covered | The BAA service list includes 'Gemini in Google Workspace'. Google does not break coverage down per feature, and its privacy hub says Gemini can support HIPAA workloads.[2],[3] |
| Gemini in Meet 'Take notes for me'Google Workspace (editions that include Gemini), BAA accepted by admin | Covered | Google files this feature under Gemini in Meet, and the BAA list includes Gemini in Google Workspace and Google Meet. No Google page names the feature itself in BAA terms, so this is coverage at the category level. The feature can also come with consumer Google AI plans, and those are not under a Workspace BAA.[2],[4] |
| Gemini app (gemini.google.com and Gemini Mac app) with Workspace accountGoogle Workspace (editions that include Gemini), BAA accepted by admin | Covered | The BAA list includes 'Gemini App (excluding Gemini in Google Chrome)' and 'Gemini Mac App'.[2] |
| Gemini in ChromeGoogle Workspace (editions that include Gemini), BAA accepted by admin | Excluded | Google excludes Gemini in Chrome from the BAA list. The privacy hub says it is not covered by the BAA.[2],[3] |
| Gemini Notebook (formerly NotebookLM)Google Workspace (editions that include Gemini), BAA accepted by admin | Excluded | The privacy hub says Gemini Notebook is not covered by Google's BAA and does not yet support ISO, SOC, or FedRAMP.[3] |
Compare Gemini for Google Workspace
- Microsoft 365 Copilot vs Gemini for Google WorkspaceMicrosoft 365 Copilot: signs a BAA
Sources
- HIPAA Compliance with Google Workspace and Cloud Identity
- HIPAA compliance on Google Cloud and Google Workspace
- Generative AI in Google Workspace Privacy Hub
- Take notes for me in Google Meet
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.