Designed for Gmail
HIPAA compliant help desk, inside Gmail. BAA included.
Most help desks make you buy an enterprise tier to get a BAA. Keeping includes it in a $49 per user per month plan, inside the Gmail your team already uses.
- Full HIPAA compliance with an executed BAA, included
- $49 per user per month, executed BAA included
- Everyone signs in with Google. No shared passwords
Rated 4.5 /5 on G2
14 days free. No credit card required. Works with the Gmail you already use.
2,000+ companies run their shared inbox in Gmail with Keeping
“We've been able to cut our customer response time down to mere minutes for the vast majority of requests. Vacation and illness coverage has been nearly completely solved.”
“Is Gmail HIPAA compliant?”
A free @gmail.com account is not. Google Workspace is, once your organization accepts Google’s Business Associate Amendment in the Admin console and keeps patient email inside the services it covers.
Google’s BAA does not cover add-ons. Any tool you put on top of Gmail needs its own BAA, and a shared login for your front-desk address breaks the rule that every person who touches PHI is identifiable. Keeping was built around both facts.
Who has the login?
Was this forwarded?
Did anyone reply?
From patient email to handled request.
1. Give it an owner, without forwarding it.
An email arrives at your shared address. Assign it to a teammate inside Gmail. Nobody forwards PHI to a personal inbox to get it handled.
2. Ask a colleague beside the thread.
Internal notes and @mentions sit next to the patient’s email, so the question and the context stay in one covered place instead of a second email chain.
3. Keep its status clear.
Mark conversations Open, Pending, or Closed so the whole team can see what still needs a reply, and nothing waits in someone’s personal inbox.
4. See how quickly patients hear back.
Reports show response times by teammate and by mailbox, so you can set expectations and spot the queue that is falling behind.
Full HIPAA compliance at a small-team price.
Everything in the Advanced plan, plus the paperwork, the sign-in model and the record-keeping a covered entity needs from a help desk vendor. $49 per user per month, with the BAA included rather than held back for an enterprise contract.
Executed BAA with Keeping
A Business Associate Agreement signed by Keeping is part of the plan. Your account is provisioned as HIPAA Enabled once it is in place and the configuration requirements are met.
Read the configuration requirements
Google sign-in for every teammate
Each agent signs in with their own Google Workspace account. Keeping never sees or stores a password, and there is no shared login to the patient inbox.
SOC 2 Type II and encrypted storage
Keeping’s security controls are independently assessed through a SOC 2 Type II audit. Data is encrypted in transit and at rest on Google Cloud Platform in the United States.
View our trust center
A record of who handled what
For HIPAA Enabled accounts, Keeping writes an append-only log of who viewed each conversation and who changed its status, priority or recipients, retained for six years.
Watch how Keeping works
“Keeping seamlessly integrates with Gmail, so we don't have to work with another tool. It allows everyone to see responses from the team.”
A help desk your compliance officer can sign off on.
HIPAA plan: $49 per user per month.
Executed BAA included. The lowest-priced HIPAA plan we have found in help desk software. Nothing to migrate: your email is already in Gmail.
Start the trial with test data. Ask us for the BAA, and your account is provisioned as HIPAA Enabled before any patient email goes in.
Rated 4.5 /5 on G2
14 days free. No credit card required. Works with the Gmail you already use.
Frequently asked questions
Is Gmail HIPAA compliant?
A free @gmail.com account is not, and cannot be connected to a HIPAA Enabled account. Google Workspace can be, when your organization accepts Google’s Business Associate Amendment in the Admin console and keeps PHI inside the services it covers. Google’s BAA does not extend to add-ons, which is why Keeping signs its own with you.
Do you sign a BAA?
Yes. The HIPAA plan includes an executed Business Associate Agreement with Keeping. Ask for it through your account manager or support, and we provision your account as HIPAA Enabled once the BAA is signed and the configuration requirements linked above are met. Please do not include PHI in messages to support.
Can I use real patient email during the free trial?
No. Use test data during the trial. Only a HIPAA Enabled account with a signed BAA is covered; a trial, or any other plan, is not. The trial is for seeing how assignment, notes and status work inside your Gmail before you commit.
What do I need on my side?
A Google Workspace account for your organization, your own BAA with Google accepted in the Admin console, and every teammate signing in with Google. Your shared address can be connected with Google sign-in or through HIPAA-safe forwarding. We also recommend enforcing 2-Step Verification in Workspace. Setup takes a few minutes once those are in place.
Do we have to connect our shared address with Google sign-in?
No. Connect it with Google sign-in, or keep your existing address and mail setup and use Keeping’s HIPAA-safe forwarding, which delivers through BAA-covered forwarding domains instead of the ordinary relay. Either way, each teammate still signs in with their own Google Workspace account.
Where is patient data stored?
Keeping runs on Google Cloud Platform in the United States, with data encrypted in transit and at rest. For HIPAA Enabled accounts, email moves through the Gmail API and BAA-covered pathways only, including the HIPAA-safe forwarding domains; it is never routed through Keeping’s ordinary email relay.
Are integrations and other tools covered?
No. Any third-party integration you connect to your account sits outside your BAA with Keeping and needs its own agreement. HIPAA Enabled accounts restrict which integrations can be connected.
Why is the HIPAA plan so inexpensive?
Because Keeping runs inside the Gmail your team already pays for, there is no second platform to secure, host and support. The HIPAA plan is $49 per user per month with the BAA, SOC 2 Type II controls, audit log, SLA uptime guarantee and a dedicated account manager included. HIPAA is part of the plan, not an enterprise tier you have to negotiate into.
Do I need to leave Gmail?
No. Keeping adds assignment, internal notes, status and reports to the Gmail your team already uses, through one browser extension. There is no separate inbox for anyone to check.
“The single best and most impactful purchase I have made for our company, and it didn't break the bank. The ticket management has saved us so much time and money and increased our customer satisfaction score immensely.”
Patient email handled by name, inside Gmail.
Give your front desk a shared inbox with an owner for every message and a BAA behind it.
Rated 4.5 /5 on G2
14 days free. No credit card required. Works with the Gmail you already use.