Google Workspace (formerly known as Google Suite or G Suite) has stated that it enables HIPAA compliance. It also appears to allow only authorized personnel to access ePHI and use activity logs and audit controls to register attempts to access ePHI. There are several exceptions for certain products, which should be reviewed carefully before using Google Workspace for healthcare purposes.
Google uses ISO 27001 certification and SOC 2 and SOC 3 Type II audits. Its BAA covers many of the G Suite products, including Gmail, Google Calendar, and Google Drive (Google Docs, Google Sheets, and Google Slides). For Google Meet, however, the BAA currently only covers the chat messaging feature and doesn’t cover the video chat feature.
