Does Google Cloud Speech-to-Text sign a BAA?
Yes, it signs a BAA
Google Cloud's BAA covers Speech-to-Text, and customers accept the BAA themselves in the Cloud console. Google says BAA customers should not opt in to Speech-to-Text data logging and should not use pre-GA offerings with PHI.
Not fully covered by the BAA: Data logging program (opt-in); Pre-GA (preview) features and models.
- Business associate
- Google Cloud
- Tool
- Google Cloud Speech-to-Text
- Plans with a BAA
- Google Cloud customers (with a Services Agreement)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Google Cloud customers (with a Services Agreement) | Signs a BAA | Accept or sign online | Accept the BAA on the IAM & Admin privacy page in any one project, unless your agreement already includes it. A Services Agreement must already be in place. Do not opt in to data logging, and do not use pre-GA offerings with PHI. Customers who buy through an unaffiliated reseller are not covered by Google's BAA terms; their reseller agreement governs.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Google Cloud says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Speech-to-Text transcription (GA models) | Covered | Speech-to-Text is named on Google's list of products covered by the BAA. The pages checked do not name individual models such as Chirp.[1],[3] |
| Data logging program (opt-in) | Excluded | This opt-in program lets Google use logged audio and transcripts to improve the service, in exchange for a discount. Google tells BAA customers not to opt in.[1],[4] |
| Pre-GA (preview) features and models | Excluded | Google says not to use pre-GA offerings with PHI unless the offering's terms expressly allow it.[1] |
Compare Google Cloud Speech-to-Text
- Amazon Transcribe vs Google Cloud Speech-to-TextAmazon Transcribe: some plans
Sources
- HIPAA compliance on Google Cloud and Google Workspace
- Privacy compliance and records for Google Cloud
- Google Cloud Platform HIPAA Business Associate Amendment
- Data logging
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.