HIPAA Compliance Email
Last Updated: November 30, 2023
At Name.com the following products are not HIPAA Compliant.
Google Google Workspace (formerly G Suite) offered by Name.com can meet the requirements of HIPAA Security Rule
Google has sought and received security certifications such as Iso 27001 Certification, SOC 2 and SOC 3 Type II audits.
Google Workspace and Cloud Identity can support HIPAA compliance. Under HIPAA, certain information about a person’s health or health care services is classified as Protected Health Information (PHI). Google Workspace and customers who are subject to HIPAA and wish to use Google Workspace in HIPAA compliance must sign a Business Associate Agreement (BAA) with Google.
To review and accept a HIPAA Business Associate Agreement (BAA) for Google Workspace the admin of your account must be signed in to an administrator account for their Google Workspace or Cloud Identity service. Non-administrator Google Workspace users or users of the legacy free edition of Google Workspace cannot review and accept a BAA from Google at this time.
Opt in to the HIPAA Business Associate Agreement: Google Admin Console
- Click Company Profile.
- Select Profile.
- In Security and Privacy Additional Terms next to HIPAA Business Associate Amendment, click Review and Accept.
- Answer all three questions, and if you are able to be confirmed as a HIPAA covered entity, click I accept to accept the HIPAA BAA
Google Workspace and Cloud Identity customers are responsible for determining whether they are subject to HIPAA requirements and whether they use or intend to use Google services in connection with PHI. Customers who have not signed a BAA with Google must not use Google services in connection with PHI.
Administrators must review and accept the BAA before using Google services with PHI. Google offers a BAA covering Gmail, Google Calendar, Google Drive (including Docs, Sheets, Slides, and Forms), Google Hangouts (chat messaging feature only), Hangouts chat, Hangouts Meet, Google Keep, Google Cloud Search, Google Sites, Google Groups, Google Tasks, Jamboard, Google Vault services, and Google Cloud Identity Management.
For further information you can follow Google's HIPAA Implementation Guide.
