Compliance — HIPAA (2)

Second, the agreement is what creates the cover, and it covers you only once it is signed by both sides. Asking for one does not. Until your BAA is executed, treat RowFold as you would any tool outside your compliance boundary: fine for operations that never touch patient data, unsuitable for anything that does. To start, tell us the legal entity that will be named as the covered entity and where the paperwork should go — often legal or privacy rather than the person writing in. We will come back to you on scope and timing before anything is signed.