Business Associate Agreement

Learn about the Business Associate Agreement (BAA) required under HIPAA regulations for U.S. healthcare providers using Zanda.

Need a BAA? We've made it simple.

If you’re based in the U.S. and work with patient health information, HIPAA rules require you to have a Business Associate Agreement (BAA) with any company that helps you manage that information.
The U.S. Department of Health & Human Services explains that a business associate is anyone outside your team who handles protected health information (PHI) on your behalf. HIPAA requires a signed agreement to make sure that information is properly protected.
That’s where Zanda comes in. Since we process health information for your practice, a BAA is required—but don’t worry, we’ve already got it covered and made it easy for you.

The BAA is now incorporated into our Global Data Processing Agreement (DPA), and is also available via Zanda’s Terms of Use, which we recommend you review. It becomes effective upon your subscription to the Services and remains in effect for the duration of your subscription.

 

If you have any questions about this, please let us know.