Glossary

Business associate agreement (BAA)

A contract required by HIPAA between a covered entity and any vendor that creates, receives, stores, or transmits protected health information on its behalf, making the vendor liable for safeguarding it.

Form tools, email platforms, CRMs, and call recording vendors that touch patient inquiries all need one. Most consumer form builders and ad pixels will not sign one, which is why they cannot sit on a booking page.