HIPAA

BAA reviewed August 12, 2026 by our privacy counsel

What the BAA covers

Teams that review contracts holding protected health information can sign a business associate agreement with us before uploading anything.

Safeguards

Administrative, physical and technical safeguards for PHI

Included

Included

Breach notice

Notice within 72 hours of discovering a breach

Included

Included

Subcontractors

Every subprocessor bound by the same terms

Included

Included

Return and destruction

PHI returned or destroyed when the agreement ends

Included

Included

Medical records

Proviso does not store or process clinical records

Not applicable

Not applicable

Request a business associate agreement

We send our BAA for review, usually within one business day. Healthcare customers can sign it before their workspace opens.

Create a free website with Framer, the website builder loved by startups, designers and agencies.