Business Associate Agreement (BAA)
IntegraChat's position on BAAs, and how to request one
Overview
A Business Associate Agreement (BAA) is a HIPAA contract between a covered entity (your practice) and a vendor that creates, receives, maintains, or transmits protected health information (PHI) on your behalf.
Our position: local-only software
IntegraChat runs entirely on your office network. The server is a Windows PC in your office and devices connect over your LAN. There is no IntegraChat cloud, no external relay, and no third-party storage of practice data. In normal use, A.N.T. Dental Integration never receives or has access to your PHI, so we are a software vendor, not a Business Associate.
No BAA needed (default)
You install and run IntegraChat on your own network and do not give us access to your server or data.
BAA required first
You ask us for a service that could expose PHI, for example:
- Remote troubleshooting with access to your server
- Data migration or integration work involving PHI
- Remote maintenance with access to message logs or patient data
Compliance officer asking for one anyway?
Many compliance officers ask every vendor for a BAA or a written statement. We are happy to provide either: a signed BAA if we will perform services that touch PHI, or a written statement of IntegraChat's local-only architecture for your vendor file. Email us and we will send the right document for review.
How to request a BAA
Email integrachatapp@gmail.com with the subject "BAA Request for IntegraChat". Include your organization name, a contact person, and a short description of the services you need.
We will send our BAA for your review, and it will be fully signed before any service involving PHI begins. There is no extra fee to sign a BAA.
What our BAA covers
- Permitted uses and disclosures of PHI
- Safeguards against unauthorized use or disclosure
- Breach notification procedures
- Subcontractor requirements (if any)
- Return or destruction of PHI when services end
- Compliance with the HIPAA Privacy and Security Rules
Your responsibilities as a covered entity
With or without a BAA, your practice remains responsible for:
- Your HIPAA privacy and security policies and risk assessments
- Workstation access, device handling, and staff training
- Deciding who can page, chat, and view analytics in IntegraChat
- Reporting breaches as HIPAA requires
More information
See how IntegraChat approaches HIPAA, our Privacy Policy and Terms of Service, or the HHS sample BAA provisions.
Related: Privacy Policy · Terms of Service · BAA · HIPAA compliance