HIPAA Compliance with Google Cloud Platform

Many services in the Google ecosystem can be used in a HIPAA compliant manner. Currently, Google Cloud Platform (GCP) lists Firestore as a BAA "covered product" that can be used with PHI data. At the time of this article, the BAA does not cover other services such as the Realtime Database and Crashlytics. Teams should sign a business associates’ agreement (BAA) with GCP and follow all HIPAA Compliance guidance when building and managing HIPAA compliant solutions on GCP.