This is true, however Amazon's standard BAA is a bit more robust than Google's. This didn't stop my HIPAA-compliant company from choosing Google, but it does make it more difficult to compare the two clouds on HIPAA-friendliness.

Can you say more about what you found less robust? And (hopefully) were you unable to get the legal agreement up to snuff by the end?

Disclosure: I work on Google Cloud (but not compliance).

There's been a lot of talk in the compliance gcp slack on this, seems like a lot of products are being audited and announcements will be made at Next.

Let's hope they are building the managed Postgres product from the ground up with an eye toward compliance!

Well, since mysql compatible Cloud SQL is, I would imagine pg would be too.

AWS launched Postgres RDS in November 2013. They covered MySQL and Oracle RDS under BAA in August 2015. But AWS didn't add Postgres RDS to the BAA until November 2016. We're hoping GCP doesn't delay covering Postgres Cloud SQL under BAA like AWS did with their managed Postgres.