Under HIPAA, a company that handles protected health information on behalf of a healthcare provider is a business associate, and the two must sign a business associate agreement (BAA) that sets out how that information is protected.
Accepted at signup
Every referring provider and specialist practice accepts the Direct Axess BAA when they join. The platform records which version each organization accepted, so there is never a question of what was agreed.
What it covers
- How Direct Axess may use and disclose protected health information — only to provide the Service.
- The safeguards we maintain to protect it.
- How we report and respond to any security incident or breach.
- What happens to the information when an account ends.
Read the agreement
The current agreement will be published with the platform at launch.
Published at launch