If Firebase HIPAA Compliant?
Firebase is Google’s platform-as-a-service (PaaS) offering. The service is advertised as a developer platform that allows developers to build applications quickly by eliminating the need for backend development and database management.
Many services in the Google ecosystem can be used in a HIPAA compliant manner. Currently, Google Cloud Platform (GCP) lists Firestore as a BAA “covered product” that can be used with PHI data. At the time of this article, the BAA does not cover other services such as the Realtime Database, and Crashlytics. Teams should sign a business associates’ agreement (BAA) with GCP and follow all HIPAA Compliance guidance when building and managing HIPAA compliant solutions on GCP.
Most cloud services provide HIPAA compliant services on a “Shared Responsibility” model. Learn more about the compliance requirements shared between your organization and your cloud provider.
Building HIPAA Compliant Applications
Organizations have several options for building HIPAA compliant services. Teams may turn to Amazon Web Services (AWS) for solutions to rapidly build compliant applications.
- Serverless offerings such as AWS Lambda can be configured for HIPAA compliance.
- Hosted database services such as Amazon RDS may be configured for HIPAA compliance. With RDS teams can build HIPAA compliant databases using MySQL, PostgreSQL, MariaDB, Oracle, and more.
These services are a good alternatives to Firebase, and allow teams to quickly build applications without worrying about much cloud configuration and DevOps administration.
HIPAA Managed Cloud
As an alternative to traditional cloud security and compliance management, Dash provides a HIPAA Managed Cloud, in coordination with managed service provider (MSP) partners.
With the Organizations can take advantage of all of the services Amazon Web Services offers while a managed service provider, handles all technical infrastructure such as servers, networking, and access control.
Unlock The Cloud For Healthcare
Automate Your Organziation’s HIPAA Security Program