Your HIPAA business associate agreement
If you handle health data, we sign a business associate agreement with you before any work starts.
HIPAA requires a contract called a business associate agreement (BAA) with any company that handles health data for you. If your business handles health data, such as a telehealth clinic or a program with health intake, we sign a BAA with you as standard and at no extra charge.
When it's signed
The BAA is signed before any work starts, so it's in place from the first day we handle your data.
How health data is protected
- Health data is handled to HIPAA standards.
- It's encrypted while it travels and while it's stored.
- Staff see only what their role allows.
- Each time someone views or changes a member record, it's logged with their name, and the log can't be edited.
Getting the documents
Your lawyer or compliance lead will want to read the BAA and our security documentation. Both are available to your team under a confidentiality agreement. Contact your account team to request them.
Good to know
Whether your business needs a BAA depends on what data you collect. If you're not sure, ask your own lawyer.
Related articles
Still need help?
Your account team answers questions about your app, your data and your bill. Tell us which page you were on and what you were trying to do.