Business Associate Agreement
This is a plain-language summary of the Business Associate Agreement (BAA) that governs how Workforce AI handles protected health information (PHI) on your behalf under HIPAA. The executed BAA is the binding document.
Business Associate Agreement
A plain-language summary of the BAA that governs how Workforce AI handles PHI on your behalf under HIPAA. The executed BAA is the binding document.
This page summarizes the agreement in everyday language so you can review it quickly. It is not the agreement itself and does not create one. To put a BAA in place, request the countersigned version at the bottom of this page.
1. Definitions
Terms like PHI, breach, and required by law carry the meaning given in HIPAA and its regulations. You are the covered entity (or a business associate passing PHI to us); Workforce AI is your business associate.
2. Permitted uses of PHI
We use and disclose PHI only to provide the service to you, as your BAA and service agreement permit, or as required by law. We do not sell PHI, and we do not use it for advertising. We do not use your PHI to train third-party foundation models.
3. Safeguards
We maintain administrative, physical, and technical safeguards designed to meet the HIPAA Security Rule, including encryption in transit and at rest, role-based access, audit logging, and per-customer data isolation. See our HIPAA compliance page and security page.
4. Reporting and breach notification
We report to you any use or disclosure of PHI not permitted by the agreement, any security incident of which we become aware, and any breach of unsecured PHI, without unreasonable delay and within the timeframe set in the BAA.
5. Subcontractors
We require any subcontractor that creates, receives, maintains, or transmits PHI on our behalf to agree in writing to restrictions and conditions at least as strict as those that apply to us. Our providers are listed on the sub-processors page.
6. Access, amendment, and accounting
We help you meet your HIPAA obligations to give individuals access to their PHI, to amend it, and to account for disclosures, to the extent we hold that PHI in the service.
7. Return or destruction of PHI
When the agreement ends, we return or securely destroy the PHI we hold for you where feasible, and otherwise extend the protections of the BAA to any PHI we cannot return or destroy.
8. Term and termination
The BAA runs alongside your service agreement. If we materially breach it and do not cure the breach, you may terminate.
Put a BAA in place
Email privacy@hireworkforce.ai or contact us and we will send the countersigned BAA for signature. The executed agreement, not this summary, governs.
This is a summary in everyday language, not the agreement itself. To put a BAA in place, request the countersigned version below.
1. Definitions
Terms like PHI and breach carry the meaning given in HIPAA. You are the covered entity; Workforce AI is your business associate.
2. Permitted uses of PHI
We use PHI only to provide the service, as permitted by your BAA, or as required by law. We do not sell PHI, use it for advertising, or use it to train third-party foundation models.
3. Safeguards
Administrative, physical, and technical safeguards designed for the HIPAA Security Rule: encryption in transit and at rest, role-based access, audit logging, per-customer isolation. See our HIPAA page.
4. Reporting and breach notification
We report unpermitted uses, security incidents, and breaches of unsecured PHI without unreasonable delay and within the timeframe set in the BAA.
5. Subcontractors
Any subcontractor handling PHI must agree in writing to protections at least as strict as ours. See the sub-processors page.
6. Access, amendment, and accounting
We help you meet your obligations to give individuals access to their PHI, to amend it, and to account for disclosures, to the extent we hold that PHI.
7. Return or destruction of PHI
When the agreement ends, we return or securely destroy the PHI we hold where feasible, and otherwise keep protecting it under the BAA.
8. Term and termination
The BAA runs alongside your service agreement. If we materially breach it and do not cure, you may terminate.
Put a BAA in place
Email privacy@hireworkforce.ai or contact us. The executed agreement, not this summary, governs.
Talk to a real person.
We will send the agreement and answer any questions.
