Legal
Business Associate Agreement.
Free on every plan, signed from the dashboard, standard and unmodified.
This page describes our policy in plain English so you can read it before you sign up. The executable agreement is being finalised with counsel and is not published yet \u2014 if you need the signed document before committing, email support@letssignal.com and we will send the current draft.
What it is
Under HIPAA, a vendor that handles protected health information on your behalf is a business associate and has to agree in writing to specific obligations. A fax line carrying patient records is exactly that.
Signal Fax is a business associate. We execute a BAA with any customer who wants one, at no cost, on the $12 plan as readily as on the $79 one.
How to get it signed
Open Settings in the dashboard, click Sign BAA, and e-sign. It takes about thirty seconds and there is no sales conversation in the way.
What it covers
Permitted uses and disclosures of PHI, safeguards, subcontractor obligations, breach notification with committed timelines rather than discretionary ones, and what happens to your data when the agreement ends.
What it is not
It is not a certification. There is no such thing as a HIPAA-certified fax service, because HIPAA has no certification body. Any vendor claiming otherwise is describing something that does not exist.
Questions
If anything here is unclear, ask us before you sign up rather than after.