Business associate agreement
Our commitment to protecting PHI.
Ambula enters into a Business Associate Agreement with every healthcare customer, setting out how protected health information is used, safeguarded, and handled under HIPAA for as long as you use the platform.
Get started for freeReyes & Hall LLP
6 active cases with your practice
- Case 4388 · OkonkwoRecords requested2d
- Case 4155 · ParkDemand packet sent5d
- Case 4102 · OseiTreating1w
PHI use is limited to the services.
Our obligations
Safeguards, minimum necessary, and breach reporting.
As the business associate, Ambula implements administrative and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of electronic PHI, and holds subcontractors to the same standard.
- PHI used only as necessary to provide the services
- Minimum necessary information used for each purpose
- Breaches reported within five business days of discovery, no later than ten
- Subcontractors held to identical PHI protection standards
Reyes & Hall LLP
6 active cases with your practice
- Case 4388 · OkonkwoRecords requested2d
- Case 4155 · ParkDemand packet sent5d
- Case 4102 · OseiTreating1w
Customer responsibilities
Access, authorization, and device security.
Customers agree to obtain the patient authorizations needed for communications, notify Ambula of changes to privacy practices, and limit access to the software to their own providers.
- Obtain required patient authorizations
- Notify Ambula of privacy practice changes
- Limit software access to providers of the customer
- Protect devices with reasonable security measures
Intake packet
Sent in Spanish · 12 Mar
Signature
Termination and disputes
Data handling at termination.
Upon termination, Ambula destroys all protected health information, or retains it under extended agreement protections for a specified retention period. Disputes proceed through mediation first, then arbitration in Los Angeles County, California.
- PHI destroyed at termination, or retained under continuing protections
- Disputes go to mediation, then arbitration
- Proceedings administered by the American Arbitration Association
Inbound referrals
From 34 firms in your area
- M. OkonkwoCervical strain · Reyes & Hall LLP2h
- D. AlvarezLumbar radiculopathy · Bright Law5h
- S. WhitfieldPost-concussive · Kaur Injury1d
firms referring
Why the BAA matters.
A signed BAA is part of how Ambula supports HIPAA-compliant practices, from onboarding through the life of the account.
Clear scope
The agreement applies for as long as your practice is subscribed to and using Ambula's services.
Accountable subcontractors
Any subcontractor that touches PHI on Ambula's behalf must meet the same protection standards Ambula does.
Defined breach process
Breach notification timelines are spelled out in the agreement, not left to interpretation.
Specialties
Explore other specialty areas.
Ambula EMR
$300per provider, per month
Features
A signed BAA is included as part of every Ambula subscription, covering PHI handling across the platform.
FAQ
Frequently asked questions.
Everything you need to know about the product and billing.
Still have a question?
Book a demoWhat does the BAA cover?
It governs how Ambula handles protected health information while your practice is subscribed to and using Ambula's services, including safeguards, permitted uses, and breach notification.
How quickly are breaches reported?
Within five business days of discovery, and no later than ten business days, as set out in the agreement.
What happens to our data if we terminate?
Ambula destroys all protected health information, or retains it under the extended protections of the agreement for a specified retention period.
How are disputes handled?
Disputes go to mediation first, then arbitration administered by the American Arbitration Association, with proceedings in Los Angeles County, California.
Get a copy of our BAA.
Talk to us about your compliance requirements and we'll walk through the agreement together.