Business Associate Addendum (HIPAA BAA) for Cloud Software Providers
An addendum a cloud or software vendor attaches to its services agreement when customers store or send protected health information (PHI). It sets out permitted uses of PHI, safeguards, breach notice, subcontractors and return or destruction of PHI.
Easy PDF filling and editing
- Fill out forms in your browser without installing software
- Files are processed on our own server and not shared with third parties
- Instant export of the completed document in PDF format
Instructions for filling out Business Associate Addendum (HIPAA BAA) for Cloud Software Providers
This template is used for official filing and documentation. Below are detailed instructions for completing, requirement details, and submission rules.
Who needs to fill out this document?
This form is designed for use by legal entities, individuals, or authorized representatives in the following cases:
- SaaS and cloud companies with healthcare customers.
- Covered entities asking a vendor for a BAA.
- Compliance managers keeping vendor paperwork in order.
What you will need before starting
Before filling out the interactive form, prepare the following details and documents:
Step-by-step filling process
- Identify the vendor: Enter the legal name and state of incorporation in the first paragraph.
- Describe the services: Name the cloud services the addendum covers.
- Review the highlighted options: Check passages marked for your review and keep only what matches your setup.
- Sign and attach: Both parties sign and the addendum is attached to the services agreement.
Frequently Asked Questions (FAQ)
When is a BAA required?
HIPAA requires a written agreement between a covered entity and any business associate that handles PHI for it. A compliance advisor can confirm which role you have.
Does signing a BAA make my service HIPAA compliant?
No. It is the contract part only. You still need the technical, administrative and physical safeguards the law requires.
Is this legal advice?
No. The author publishes it for general reference, not as advice on your situation. Have a qualified lawyer review it before you sign, especially if you operate outside the United States.
Ready to fill out Business Associate Addendum (HIPAA BAA) for Cloud Software Providers?
Open the editor, enter the required details, and download your document in a couple of minutes.
Proceed to fill out →