Google Workspace (formerly known as Google Suite or G Suite) has stated that it is HIPAA compliant. It also appears to only allow authorized personnel to access ePHI and to use activity logs and audit controls to register attempts to access ePHI. There are several exceptions for certain products, which should be reviewed carefully before using G Suite for healthcare purposes.
Google uses ISO 27001 certification and SOC 2 and SOC 3 Type II audits. Its BAA covers many of the G Suite products, including Gmail, Google Calendar, and Google Drive (Google Docs, Google Sheets, and Google Slides). For Google Meet, however, the BAA currently only covers the chat messaging feature and doesn’t cover the video chat feature.
