Draft — pending legal counsel review
Business Associate Agreement (BAA)
Orqelo offers a Business Associate Agreement (BAA) to Enterprise customers operating in healthcare or handling Protected Health Information (PHI) under HIPAA.
Who needs a BAA?
If your organisation is a Covered Entity or Business Associate under HIPAA and you use Orqelo to process, store, or transmit PHI, you must have a signed BAA with Orqelo before going live.
What does Orqelo's BAA cover?
- Orqelo's role as a Business Associate and permitted uses of PHI.
- Security safeguards applied to PHI at rest (AES-256) and in transit (TLS 1.3).
- Breach notification obligations and timelines.
- Sub-processor restrictions and data handling requirements.
- Term, termination, and destruction of PHI on contract end.
How to request a BAA
BAAs are available on the Enterprise plan. To request a BAA, contact us via the contact page or book a demo and mention your HIPAA requirement. We will send a draft BAA within 2 business days.
This page is a summary only. The executed BAA is the binding document. Consult your legal counsel before entering into any BAA.