Business Associate Agreement
Request a BAA for Institutional Partnerships
What is a Business Associate Agreement?
Under HIPAA regulations, a Business Associate Agreement (BAA) is a legal contract required between a Covered Entity (such as a healthcare provider) and a Business Associate (like Vytier) that handles Protected Health Information (PHI) on their behalf.
Who Needs a BAA?
If your organization is a healthcare provider, health plan, healthcare clearinghouse, or any entity that handles PHI, you will need to enter into a BAA with Vytier before using our platform for care coordination activities involving PHI.
Note: Individual users (patients, caregivers, family members) using Vytier for personal care coordination do not require a BAA. BAAs are required for institutional and organizational partnerships.
What Our BAA Covers
- Permitted uses and disclosures of PHI by Vytier
- Safeguards for the protection of PHI (AES-256 encryption, access controls)
- Breach notification procedures and timelines
- Requirements for subcontractors handling PHI
- Records retention and destruction policies
- Obligations upon termination of the agreement
Request a BAA
Complete the form below and our compliance team will reach out within 2 business days to begin the BAA process.