Guide · HIPAA and messaging

Is Google Chat HIPAA compliant? What a dental or medical office should know

Updated October 12, 2026 · DOC team

Short answer

Google Chat is on Google's list of services covered by the Google Workspace Business Associate Agreement. Your organization must accept the BAA before using protected health information, and third-party add-ons aren't covered. Google's page doesn't address personal accounts, so treat them as not covered. Checked October 12, 2026.

This is general information for dental and medical offices, not legal advice. Vendor terms change, so check the linked pages on the day you decide, and talk with your compliance advisor before patient information goes anywhere.

What Google's own pages say

  • BAA must be accepted first. Google says Workspace customers must accept its BAA before using PHI, and customers without one must not use PHI in Workspace (Google Workspace HIPAA).
  • Chat is covered. Google Chat appears on Google's list of included services, alongside Gmail, Meet, Drive, Calendar, and others (Google services list).
  • Add-ons aren't. Third-party apps and add-ons are not covered.

What we couldn't confirm: which Workspace editions qualify. Ask Google or your reseller before relying on it.

What that means for a dental or medical office

If your office already uses Google Workspace for email, accepting the BAA in the admin console and using Google Chat for internal coordination can be a reasonable covered option. Personal Gmail accounts aren't part of a Workspace agreement, so don't rely on them. As with any chat tool, typing isn't practical mid-procedure, so most offices still want a one-tap signal for the moments that can't wait.

The rule that keeps most offices out of trouble

Whatever app your team uses for quick coordination, keep it to logistics. "Exam ready, room 3." "Need an assistant in 2." "Lab on line one for Dr. Lee." Signals like these tell the team what to do without saying anything about a patient. Names, dates of birth, diagnoses, and treatment details stay in your practice management or EHR software, which your office already covers with the right agreements.

Write the rule down where new hires will see it. The Signal Plan Builder puts it at the bottom of a printable one-page plan.

Where DOC fits

DOC is built for exactly that kind of logistics signal: an iPhone app with an Apple Watch companion where one tap sends "exam ready" or "need an assistant" to the right person. To be plain about it, DOC is not certified or audited for HIPAA compliance, and during the beta it is not approved for patient information. Beta offices use synthetic data only, and no Business Associate Agreement is in effect (Beta Terms).

Frequently asked questions

Is Google Chat covered by Google's BAA?

Yes. Google Chat is on Google's list of services included in the Google Workspace BAA, once your organization accepts it.

Is personal Gmail or Google Chat HIPAA compliant?

Google's HIPAA page covers Workspace customers who accept its BAA and doesn't address personal accounts. Treat personal Gmail and Chat as not covered.

Are Google Chat apps and add-ons covered?

No. Google says third-party apps and add-ons are not covered by its BAA.