Business Associate Agreement.
Every customer signs it in setup, and Settings shows the date it was signed.
Plain-English summary.
A Business Associate Agreement (BAA) is a contract required by HIPAA whenever a vendor handles protected health information (PHI) on behalf of a healthcare provider. It specifies what the vendor can and cannot do with that data, what security controls it maintains, and what happens if something goes wrong. Without a signed BAA, sharing PHI with a vendor is a HIPAA violation on your part and ours.
Every customer signs Praktend's Business Associate Agreement in setup, before the team can continue, and Settings shows the date it was signed. The agreement runs for as long as the practice is a Praktend customer and survives termination for as long as Praktend retains any PHI. When you offboard, we destroy all PHI and issue a written certificate confirming destruction.
We are not publishing the full agreement text on this public page; a stand-alone public copy risks drifting out of sync with what practices actually accept, and the agreement is revised from time to time, with notice. If your malpractice carrier, counsel, or a HIPAA auditor has questions about the agreement, Chris Shannon, Founder, answers them on a call: chris@praktend.com.
Signed in setup
The BAA is signed electronically in setup. For questions about it, email chris@praktend.com and Chris Shannon, Founder, answers on a call. The URL of this page (https://praktend.com/legal/baa) is stable and may be submitted to vendor questionnaires, malpractice carriers, or HIPAA auditors as the current reference for how a practice gets the agreement.
Who the agreement covers
The list of our subprocessors, and each vendor's current Business Associate Agreement status, is published on our trust page. See also the HIPAA section of our trust page for what the agreement requires of us in practice.
HIPAA questions? Email directly.
Written answers within one business day.
Email chris@praktend.com →