← Everyday AI for staff (ChatGPT, Copilot, Gemini...) compared
Gemini in Google Workspace
Google · Productivity suite AI · MedicalDentalTherapy
Verdict: Safe on specific plans only
BAA only on: Workspace Business / Enterprise (work account).
BAA fine print (Workspace Business / Enterprise (work account)): Third-party add-ons are not covered; Gemini Notebook is excluded. Source: https://support.google.com/a/answer/15706919?hl=en, checked 2026-10-16
Practice fit: General-purpose tool (editorial category).
Not legal advice. Summarized from the vendor's own pages. Confirm with the vendor before entering PHI.
Workspace Business / Enterprise (work account)
| Question | Answer | Source & date checked |
|---|---|---|
| BAA available? | Yesyes (admin accepts BAA in Admin console; Gemini is in HIPAA Included Functionality)Third-party add-ons are not covered. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| BAA self-serve? | Yesyes (admin accepts in Admin console) | https://support.google.com/a/answer/3407054?hl=en checked 2026-10-16 |
| BAA fine print | StatedThird-party add-ons are not covered; Gemini Notebook is excluded. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| Trains on your data by default? | NonoNot human-reviewed or used to train outside your domain without permission. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| Retention | StatedAdmin sets 90 days to indefinite | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| SOC 2 | Yesyes (SOC 1/2/3) | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| ISO 42001 | Yesyes | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| HITRUST | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| Starting price (as published) | UnverifiedunverifiedNo published price found on pages we fetched. | No first-party source found · checked 2026-10-16 |
Gemini Notebook (formerly NotebookLM) in Workspace
| Question | Answer | Source & date checked |
|---|---|---|
| BAA available? | Nono'not covered by the Google Business Associate Agreement (BAA)'. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| BAA self-serve? | n/a | Follows from the BAA answer |
| BAA fine print | StatedExplicitly 'not covered by the Google Business Associate Agreement'. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| Trains on your data by default? | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| Retention | StatedPrompts/responses not retained after session | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| SOC 2 | Nono'does not support ISO, SOC, or FedRAMP compliance' at this stage. | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| ISO 42001 | Nono | https://support.google.com/a/answer/15706919?hl=en checked 2026-10-16 |
| HITRUST | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| Starting price (as published) | UnverifiedunverifiedNo published price found on pages we fetched. | No first-party source found · checked 2026-10-16 |