Is Google Cloud Translation HIPAA compliant?
Google Cloud signs a Business Associate Agreement with its customers, which HIPAA requires before a vendor handles patient data for you. Once it's signed, you can use Google Cloud Translation with patient data within the BAA's scope; whether your use is compliant still depends on your setup and your own policies. Google Cloud doesn't say whether the BAA covers all of its AI features.
Does Google Cloud Translation sign a BAA?
Yes, it signs a BAA
Cloud Translation and AutoML Translation are on Google Cloud's list of products covered by its BAA. Customers accept the BAA themselves in the Google Cloud console. Google says it does not use content sent to the API to train its translation models.
Not fully covered by the BAA: Pre-GA (preview) features and models.
Not confirmed for the AI features: Google Cloud doesn’t say whether its BAA covers Translation LLM and adaptive translation (Gemini-based). Get that in writing before using it with patient data.
- Business associate
- Google Cloud
- Tool
- Google Cloud Translation
- Plans with a BAA
- Google Cloud customers (with a Services Agreement)
- Checked
By plan
| Plan | BAA | How to get it | Conditions |
|---|---|---|---|
| Google Cloud customers (with a Services Agreement) | Signs a BAA | Accept or sign online | Accept the BAA on the IAM & Admin privacy page in any one project, unless your agreement already includes it. A Services Agreement must already be in place. Do not use pre-GA offerings with PHI. Customers who buy through an unaffiliated reseller are covered by their reseller agreement, not Google's BAA.[1],[2],[3] |
Are the AI features covered?
Vendors often sign a BAA for the core product but leave some AI features out. Here is what Google Cloud says about each one.
| AI feature | Under the BAA | Details |
|---|---|---|
| Cloud Translation API (Basic and Advanced, NMT models) | Covered | 'Cloud Translation' is on Google's list of products covered by the BAA. Google says text is held only briefly in memory and is not used to train its translation features.[1],[4] |
| AutoML Translation (custom models) | Covered | 'AutoML Translation' is listed separately on the BAA-covered products list.[1] |
| Translation LLM and adaptive translation (Gemini-based) | Not stated | These run through the Cloud Translation API, but the HIPAA page does not name them, and their GA status was not checked. Google says pre-GA offerings should not be used with PHI.[1] |
| Pre-GA (preview) features and models | Excluded | Google says not to use pre-GA offerings with PHI unless the offering's terms expressly allow it.[1] |
Compare Google Cloud Translation
- DeepL vs Google Cloud TranslationDeepL: not confirmed
- Google Translate vs Google Cloud TranslationGoogle Translate: not confirmed
Sources
- HIPAA compliance on Google Cloud and Google Workspace
- Privacy compliance and records for Google Cloud
- Google Cloud Platform HIPAA Business Associate Addendum
- Data usage FAQ (Cloud Translation)
A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.