sentinelone.com

Yes—but **it depends on which Gemini product and how you use it**. As of August 2026, Google states that **Gemini can support HIPAA workloads**. For Google Workspace, Gemini is included in Google's HIPAA-covered functionality, provided the appropriate **Business Associate Agreement (BAA)** is in place. [knowledge.workspace.google.com](https://knowledge.workspace.google.com/admin/generative-ai/workspace-with-gemini/gemini-for-google-workspace-faq-business?co=DASHER._Family%3DBusiness-Enterprise&rd=1&visit_id=639171893951697668-1327718740&utm_source=chatgpt.com) ### The important distinction - **Gemini in Google Workspace:** Yes, it can be used for HIPAA workloads under Google's BAA. This includes Gemini in Gmail, Docs, Sheets, Slides, Meet, and the Gemini app. [knowledge.workspace.google.com](https://knowledge.workspace.google.com/admin/generative-ai/workspace-with-gemini/gemini-for-google-workspace-faq-business?co=DASHER._Family%3DBusiness-Enterprise&rd=1&visit_id=639171893951697668-1327718740&utm_source=chatgpt.com) - **Gemini for Google Cloud:** Google lists Gemini for Google Cloud as HIPAA compliant/covered under its compliance framework and BAA. [docs.cloud.google.com](https://docs.cloud.google.com/gemini/docs/discover/certifications?utm_source=chatgpt.com) - **Gemini in Chrome:** **No**—Google specifically says Gemini in Chrome is not currently covered by the HIPAA BAA and is automatically blocked for customers who have signed a BAA. [knowledge.workspace.google.com](https://knowledge.workspace.google.com/admin/generative-ai/generative-ai-in-google-workspace-privacy-hub?rd=1&visit_id=639177225161449217-1059536237&utm_source=chatgpt.com) - **Consumer/personal Gemini:** Don't assume that a regular personal Gemini account is appropriate for entering PHI. HIPAA protection depends on the specific service, contractual BAA, configuration, and use case. Also, **HIPAA compliance isn't something an AI tool can guarantee by itself**. Google describes HIPAA compliance as a shared responsibility, and your organization still has to configure the service appropriately and follow HIPAA policies. [knowledge.workspace.google.com](https://knowledge.workspace.google.com/admin/compliance/hipaa-compliance-with-google-workspace-and-cloud-identity?rd=1&visit_id=639178361620515873-3614651723&utm_source=chatgpt.com) If you're asking because you're considering **putting patient/client information into Gemini**, tell me **which Gemini you're using (personal Gemini, Gemini Advanced, Google Workspace Gemini, Gemini API/Google Cloud, etc.)**, and I can tell you whether that specific setup is appropriate for PHI.