Draft. Pending attorney review. Effective date to be set.

HIPAA Business Associate Agreement

This page explains how ChiroOS handles the Business Associate Agreement (BAA). It is a summary. The signed agreement is the controlling document.

When it is signed

A BAA is executed at signup, on Day 0, before a practice enters any patient information. It covers ChiroOS as the practice’s business associate.

Safeguards, in plain language

• Encryption in transit. Data moving between your devices and ChiroOS is encrypted.
• Encryption at rest. Data stored in ChiroOS is encrypted.
• Access logging. Access to the system is logged.
• Tenant isolation. Each practice’s data is kept separate from every other practice.
• One subprocessor. Google Cloud is the only subprocessor that handles patient data (PHI), and ChiroOS has a BAA with Google Cloud. Billing details are handled by the payment processor and never include patient data.

Getting your signed copy

The signed BAA is available on request at support@chiro-os.com.

Questions

Write to support@chiro-os.com. See also the Privacy Policy and the Terms of Service.