Business associate agreement

Effective [DATE]Version [N]

Draft structure. Section text is placeholder for counsel to write and approve. [COUNSEL REVIEW]

1. Purpose

A business associate agreement (BAA) sets out how COMPLI3D may use and protect protected health information it handles on behalf of a customer that is a covered entity or business associate. A BAA is available. [VERIFY PLAN SCOPE]

2. Definitions

[COUNSEL TO DRAFT] Terms such as “protected health information”, “covered entity” and “business associate” have the meanings given in 45 CFR § 160.103.

3. Permitted uses and disclosures

[COUNSEL TO DRAFT]

4. Safeguards

[COUNSEL TO DRAFT] Administrative, physical and technical safeguards are described on our security page.

5. Reporting incidents and breaches

[COUNSEL TO DRAFT]

6. Subcontractors

[COUNSEL TO DRAFT] Subprocessors are listed on our subprocessors page.

7. Individual rights

[COUNSEL TO DRAFT]

8. Term and termination

[COUNSEL TO DRAFT]

9. Return or destruction of information

[COUNSEL TO DRAFT]

10. How to request a BAA

Use the contact form and choose Security or BAA as the topic, or email hello@compli3d.ai. Please don’t include health information in your message.