Business Associate Agreement

Last updated: July 23, 2026

About this page

This page summarizes, in plain language, the Business Associate Agreement (BAA) Orion AI executes with practices. The binding BAA is a separate signed document. This summary is a draft and must be replaced with your counsel-reviewed agreement.

Purpose

Under HIPAA, a Business Associate Agreement governs how Orion AI, as a business associate, may use and protect protected health information (PHI) handled on behalf of a covered entity.

Permitted uses

Orion uses PHI only to provide the agreed services and as permitted by the BAA and law.

Safeguards

Orion maintains administrative, physical, and technical safeguards to protect PHI, consistent with the HIPAA Security Rule.

Breach notification

Orion will notify the covered entity of a breach of unsecured PHI as required by the BAA and applicable law.

Subcontractors

Orion ensures that subcontractors handling PHI agree to equivalent protections.

Term and return of PHI

On termination, Orion returns or destroys PHI where feasible, consistent with the BAA.

Requesting a BAA

To request and execute a BAA, contact us via our contact page.

Contact

Questions about the BAA? Reach us at our contact page.