Business Associate Agreements
When DODD Agency Pro and an agency determine that a Business Associate Agreement (BAA) applies, the executed agreement sets out the terms that govern protected information within its scope.
DODD Agency Pro offers a Business Associate Agreement when applicable to the services and information involved. The agreement defines permitted uses, required safeguards, incident responsibilities, subcontractor obligations, and the return or destruction of protected information. An applicable BAA must be executed before protected information within its scope is entered into the platform.
Five core areas
An applicable BAA addresses the responsibilities of both parties across the areas below. Specific terms are established in the executed agreement for your agency.
Execute the BAA first
If a BAA applies to your use, execute it before entering live protected information within its scope. Until then, use only sample or non-identifying information.
A shared responsibility
DODD Agency Pro includes controls intended to support protected workflows. Where an executed BAA applies, it defines each party's responsibilities. Your agency remains responsible for its own policies, workforce training, access decisions, and the lawful handling of protected information within your organization.
Need a Business Associate Agreement?
Contact us to determine whether a BAA applies to your intended use and to review the applicable agreement before entering live protected information.