Google Workspace BAA: what it covers and does not
A Google Workspace BAA is not PHIPA compliance. What the BAA actually covers for Canadian therapists, what it leaves to you, and where the real gaps are.
Gabriel Borges
"google-workspace" posts
Google Workspace PHIPA setup for Canadian therapists
Setting up Google Workspace for PHIPA as a Canadian therapist: the admin settings to change, the AI features to turn off, and where Workspace alone falls short.
Gabriel Borges
Google Workspace data residency for therapists
Where does Google Workspace store your client email, and does PHIPA require it to stay in Canada? The honest answer for therapists, and what to do about it.
Gabriel Borges
Hushmail vs Gmail for Canadian therapists
Hushmail asks you to leave Gmail. There is another way. An honest comparison of the two for Canadian therapists, evaluated against PHIPA, HIA, and PIPA.
Gabriel Borges
Is Gmail PHIPA compliant in Canada?
Gmail is not PHIPA compliant by default. Learn what Canadian therapists need to change and where the gaps remain. Updated for 2026.
Gabriel Borges
How to disable AI features in Google Workspace
The IPC's January 2026 guidance covers AI scribes, not Gmail autocomplete. Here's how to turn off Smart Compose, Gemini and the other Workspace AI features.
Gabriel Borges
Google Workspace vs Microsoft 365 vs ProtonMail
An honest comparison of Google Workspace, Microsoft 365, and ProtonMail for Canadian therapists: the PHIPA gaps, pricing, data residency, and encryption.
Gabriel Borges
Google Workspace admin console security settings
A setting by setting walkthrough of the security configuration Canadian therapists should check in the Google Workspace admin console. Covers 2FA and the BAA.
Gabriel Borges
Email retention policies for Ontario therapists
How long must Ontario therapists keep client emails? PHIPA and CRPO retention requirements, and how to configure Google Vault retention rules to match.
Gabriel Borges
PHIPA privacy impact assessment template
The IPC recommends privacy impact assessments for health information systems. A section by section template and walkthrough, with Google Workspace guidance.
Gabriel Borges
How to build a manual audit log in Google Workspace
Build a Google Sheets log of who opened which client record and when. CRPO Standard 5.6 doesn't prescribe one, but it's a practical way to meet the duty.
Gabriel Borges