Compliance for healthcare and life sciences

Healthcare and life sciences

Healthcare and life sciences organizations analyze huge amounts of sensitive data across disparate platforms and modalities. Google Cloud protects your sensitive data and helps you maintain compliance with numerous requirements across various domains, geographies, and workloads. Support for regulations like HIPAA serves your data interoperability and management needs while meeting industry-specific security, privacy, and compliance requirements. Google Cloud is also HITRUST-CSF-certified and meets ISO 27000-series standards, among many others.

Read our HIPAA guide

Resources to support your compliance

Our customers

Compliance offerings

GCP and G Suite undergo several independent third-party audits on a regular basis to ensure that we can assist with your compliance journey. Here are some of the standards, regulations, and certifications that we support or are certified against.

Helpful products and features

Cloud Healthcare API

Cloud Healthcare API bridges the gap between care systems and applications built on Google Cloud, and supports compliance with regulations such as HIPAA.

Cloud KMS

For compliance mandates requiring keys and crypto operations to be performed within a hardware environment, Cloud KMS makes it easy to create a key protected by a FIPS 140-2 Level 3 device.

VPC Service Controls

Helps you keep sensitive data private as you take advantage of GCP's managed storage and data processing capabilities.

Encryption

We automatically encrypt your data both in transit outside of physical boundaries not controlled by Google and at rest by default, and provide numerous ways for you to control your own encryption keys and data access.

Apigee healthcare APIx

Easily connect healthcare providers and app developers to build FHIR API-based digital services.

Anthos

Built on Google-pioneered open source products like Kubernetes and Knative, Anthos lets you build hybrid applications, on-premises or in the public cloud.

Data storage

GCP services are available in multiple locations worldwide. You're able to choose which facilities best meet your specific latency, availability and durability requirements.

Cloud Security Command Center

Prevent, detect, and respond to threats to your health data from one pane of glass, and act on them before they damage your business.

Google Cloud

Get started

Work with Google

Tell us about your business, and our experts will help you build the right solution for your needs.

Work with a partner

Choose one of our global partners to integrate our services with your current security operations, add functionality and specific expertise in data protection, identity and user protection, infrastructure security, scanning, monitoring, logging, and more.