Compliance — HIPAA

RowFold signs Business Associate Agreements on request. Email support@rowfold.com and we will start one with you. The standard agreement text is published in full so your counsel can read exactly what they would be signing before anyone asks for a signature. Two things are worth being precise about, because "HIPAA compliant" is a claim vendors make loosely. First, HIPAA has no certification — there is no body that audits a product and pronounces it compliant, so any vendor claiming a HIPAA certificate is describing something that does not exist. What actually exists is the agreement: under HIPAA a vendor handling PHI on a covered entity's behalf is a Business Associate, and that status is created by a signed BAA carrying specific obligations — administrative, physical and technical safeguards, breach notification within defined timeframes, and equivalent agreements flowed down to every subprocessor that could touch the data.