Workspaces on the Enterprise plan can enter into a Business Associate Agreement (BAA) to support HIPAA-compliant use of Circleback.
Circleback supports HIPAA as a business associate for PHI in a workspace where the BAA is enabled. Compliance is a shared responsibility. You are responsible for enabling the BAA, configuring retention and access, and making sure your use of Circleback meets HIPAA requirements.
Enable HIPAA compliance
Admins that are authorized to enter into a BAA with Circleback on behalf of their company can enable HIPAA compliance for the workspace.
Go to Settings → General (under Workspace).
Under HIPAA compliance, turn on Business Associate Agreement.
Review and accept the BAA.
Circleback's BAA is available at circleback.ai/baa.
Frequently asked questions
How does my organization enter into a BAA with Circleback?
The BAA is included with Enterprise. A workspace admin turns on Business Associate Agreement in Settings → General (under Workspace). That puts the BAA in effect for that workspace.
Does having a BAA mean my organization is HIPAA compliant?
No. The BAA helps support your HIPAA compliance, but using Circleback does not automatically make you compliant. Your organization is responsible for its own compliance program and for using Circleback in a way that meets HIPAA.
We provide software to healthcare customers. Do they need a BAA with Circleback?
No. You enter the BAA with Circleback for your workspace. Your customers typically enter a BAA with you. They do not need a separate BAA with Circleback unless they also use Circleback themselves.
What happens if there is a security incident involving PHI?
Circleback will report incidents and breaches as described in the BAA.
Can we change the BAA?
No. Enterprise includes Circleback's standard BAA. Custom BAAs are not offered.
Can we use Circleback for 42 CFR Part 2 records?
No. Do not use Circleback to create, receive, maintain, or transmit substance use disorder records subject to 42 CFR Part 2.
What if we turn the setting off or leave Enterprise?
Stop submitting new PHI. The BAA applies only while the workspace is on Enterprise and Business Associate Agreement is on.