Do you sign Business Associate Agreements (BAAs)?

Yes. As a Business Associate handling PHI on behalf of Covered Entity clients, we sign BAAs as standard for healthcare engagements. Our BAA covers permitted uses and disclosures of PHI, safeguards we implement, sub Business Associate flow down requirements, breach notification obligations, and termination provisions. We accept client BAAs in most cases and have worked through hundreds of healthcare contracts. Sub processors (cloud infrastructure, monitoring, third party APIs) are vetted for BAA capability before being added to the engagement.