I'm no expert on these systems, but the data that's in the cloud isn't encrypted? I would've assumed that Google can not have access to the data but are giving

I'm no expert on these systems, but the data that's in the cloud isn't encrypted? I would've assumed that Google can not have access to the data but are giving access to server space to host it, making HIPAA violations from employees practicaly impossible? (Unless they try to get keys to unencrypt the data, but then again that's outside the scope of this discussion) If not this is alarming, thanks for the head up