Business Associate Agreement (BAA)

What is a Business Associate Agreement (BAA)?

Under HIPAA, any vendor that creates, receives, maintains, or transmits Protected Health Information (PHI) on behalf of a Covered Entity is considered a "Business Associate." Before a Covered Entity can share PHI with a Business Associate, they must sign a BAA. This contract ensures that the vendor implements strict administrative, physical, and technical safeguards to protect the data.

Is There a "BAA Certification"?

No. This is a common misconception. The U.S. Department of Health and Human Services (HHS) does not "certify" software or issue BAA certificates. Compliance is proven through the presence of a signed BAA contract and a demonstrated commitment to the HIPAA Security Rule (such as AES-256 encryption and audit logs).

How Do I Sign a BAA with FaxLock?

We make it easy. You can view our standard, HHS-compliant BAA document below. Print it, sign it, and email the signed copy to support@faxlock.com. Once signed, you can safely use FaxLock to transmit medical records, prescriptions, and patient referrals.

Frequently Asked Questions

Is there a government BAA certification?

No. The U.S. Department of Health and Human Services (HHS) does not certify software or issue BAA certifications. A BAA is a legally binding contract between a Covered Entity and a Business Associate, not a certificate.

How do I sign a BAA with FaxLock?

You can request a BAA by contacting support@faxlock.com. We will provide a standard HHS-compliant BAA for you to review and sign electronically before transmitting any protected health information (PHI).