HIPAA & Business Associate Agreement
CareVieo operates as a Business Associate when processing Protected Health Information (PHI) on behalf of covered entities and other business associates.
What you get
- Signed BAA included with every paid plan that processes PHI.
- HIPAA-aligned administrative, physical, and technical safeguards.
- Subprocessor BAAs with every vendor that touches PHI (hosting, email, SMS).
- Audit log of PHI access available to agency owners on request.
- Breach notification within the timelines required by the BAA and applicable law.
How to sign a BAA
Email trust@carevieo.com with your agency name and signer details. Enterprise customers can request custom terms.
Customer responsibilities
HIPAA compliance is a shared responsibility. Customers are responsible for workforce training, minimum-necessary access decisions, patient authorizations, and configuring user roles inside CareVieo. Our Security page describes the controls we provide.
Questions
Contact trust@carevieo.com for our trust packet, subprocessor list, or to walk through a specific control.