We have an enterprise contact with Google with data privacy terms and controls on what happens with that data. I mean, Google will even sign a HIPAA BAA with you if you ask them to.
We don’t have one for the 3 people in the company to need to use Word on occasion.