ABAVault processes protected health information on behalf of healthcare providers, which makes us your business associate under HIPAA. We execute a Business Associate Agreement with every customer as part of onboarding, before any PHI enters the platform.
Our standard BAA covers permitted uses and disclosures of PHI, our safeguard obligations (summarized publicly on the Security page), breach notification duties and timelines, subcontractor (subprocessor) flow-down requirements, and return or destruction of PHI at termination.
To receive the current BAA for your compliance review, or to ask questions about our subprocessors and safeguards, contact us and we'll send it the same day. Your compliance officer can send us questions in writing, and we'll answer each one.