Are Gemini API (Google AI Studio)'s AI features covered by the BAA?

Gemini models via the Gemini Developer API / AI Studio: excluded from the baa.

Does Gemini API (Google AI Studio) sign a BAA?

Q: Does Gemini API (Google AI Studio) sign a HIPAA BAA?

No BAA available. Google publishes no BAA route for the Gemini Developer API or AI Studio. Its terms say the APIs aren't meant to create HIPAA obligations and bar sending PHI without Google's prior written consent. For BAA coverage, use Google Cloud's Agent Platform (formerly Vertex AI).

No BAA available

Google publishes no BAA route for the Gemini Developer API or AI Studio. Its terms say the APIs aren't meant to create HIPAA obligations and bar sending PHI without Google's prior written consent. For BAA coverage, use Google Cloud's Agent Platform (formerly Vertex AI).

Based on 3 sources, all from Google unless marked.

Business associate: Google
Tool: Gemini API (Google AI Studio)
Plans with a BAA: None
Checked: Oct 11, 2026

No BAA

Google won't sign a BAA for Gemini API (Google AI Studio).

By plan

Plan	BAA	How to get it	Conditions
Unpaid / free tier (incl. free AI Studio use)	No BAA	Not offered	The terms tell users not to submit sensitive, confidential or personal information to Unpaid Services. Google may use the content for product improvement, and human reviewers may read it.[1],[2]
Paid tier (Cloud project with active billing)	No BAA	Not offered	No BAA path is published. Under the Google APIs Terms, covered entities and business associates must not send PHI without Google's prior written consent. The Gemini API does not appear on the Google Cloud HIPAA covered-products list.[2],[3]

Are the AI features covered?

Vendors often sign a BAA for the core product but leave some AI features out. Here is what Google says about each one.

AI feature	Under the BAA	Details
Gemini models via the Gemini Developer API / AI Studio	Excluded	Not a listed HIPAA Covered Service. Google's terms also bar clinical-practice use and medical advice.[1],[2],[3]

LLM APIs that offer a BAA

Claude API (Claude Platform)BAA on: First-party API (custom / negotiated BAA), First-party API (self-serve Console enablement)Some plans only
CohereBAA on: Custom model development engagementSome plans only
GroqCloudBAA on: GroqCloud paid, generally available services (customers with an existing Groq agreement)Some plans only
OpenAI API platformBAA on: API (enterprise / sales-managed accounts), API (pay-as-you-go / self-serve organizations), API FedRAMP (with Modified Retention)Signs a BAA

All BAA-ready alternatives to Gemini API (Google AI Studio)

Sources

Gemini API Additional Terms of ServiceGoogle, Legal terms. Checked Oct 11, 2026.
Google APIs Terms of ServiceGoogle, Legal terms. Checked Oct 11, 2026.
HIPAA Compliance on Google CloudGoogle Cloud, Trust center. Checked Oct 11, 2026.

A signed BAA is necessary but not sufficient for HIPAA compliance, which also depends on configuration, access controls, and your own policies. Verdicts summarize the vendor's own published terms as of the date checked; confirm with the vendor and your counsel before sending protected health information. Not legal advice.