Certain GCP services in the Google ecosystem can be used in a HIPAA compliant manner. Google is willing to sign a Business Associates Agreement (BAA) for a select list of cloud services. This BAA designates specific physical safeguards handled by Google. It is your organization’s responsibility to implement all necessary technical and administrative safeguards.
Google Cloud platform provides HIPAA compliant services under a “Shared Responsibility” model. Learn more about the compliance requirements shared between your organization and your cloud provider.
Google Cloud Platform (GCP) provides a variety of offerings for creating backend services and deploying applications. Google’s core services can be configured to be HIPAA compliant. GCP offers the flexibility to launch, manage, and scale virtual machines (VMs), cloud storage, managed databases and other services. Dash allows your organization to create and maintain a HIPAA compliant environment through the Google Cloud Platform, with one simple process: