BAA Request
Business Associate Agreement review.
A BAA is available for eligible US covered entities and business associate relationships before PHI is processed in production.
No unsupported certification claim
ChiroVault maintains an HIPAA-aligned security posture with technical and administrative safeguards. We do not present HIPAA as a third-party certification.
Request packet
- BAA template and permitted uses/disclosures
- PHI handling boundaries and access control overview
- Audit logging, encryption, backup, and breach notification overview
- Downstream subcontractor/BAA status where PHI may be processed
Information needed
- Covered entity or business associate status
- Clinic legal name, NPI where applicable, and signatory details
- PHI processing scope and expected go-live date
- Security/procurement contact for review