Business Associate Agreement
When we handle PHI for your practice, we sign a BAA. Here’s how it works.
Last updated: June 2026
Under HIPAA, when a vendor creates, receives, stores or transmits protected health information (PHI) on behalf of a covered entity, the two parties must enter into a Business Associate Agreement (BAA). If our work for your practice involves PHI, we sign one with you.
When a BAA applies
A BAA is required where our systems touch PHI — for example, when we run patient intake or scheduling that collects health information. A BAA is not required for purely marketing work that never handles PHI, such as a brochure website with a general contact form.
What the BAA covers
- The permitted uses and disclosures of PHI we may handle for you.
- Our commitment to safeguard PHI with appropriate administrative, physical and technical protections.
- How we handle, report and respond to any security incident.
- The return or destruction of PHI when our engagement ends — consistent with our principle that your data belongs to you.
How to request one
Email info@onesuitedental.com or call (347) 961-7357 and ask for a BAA. We will send our standard agreement for your review. If your practice has its own preferred BAA, we are happy to work from it.
This page is informational and is not legal advice. The signed BAA, once executed, is the governing document.