BAA Request

A Business Associate Agreement (BAA) is available for licensed practices that require formal HIPAA documentation. This agreement outlines the responsibilities of both parties with respect to Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

1. Who Needs a BAA?

A BAA is required if your practice is a HIPAA-covered entity (e.g., a healthcare provider that transmits health information electronically) and you consider Rorshack to be a Business Associate under HIPAA. Given Rorshack's architecture — where client PHI is not transmitted to or stored on our servers — many practices may determine a BAA is not required. However, we offer one for practices that require it as a matter of policy or for compliance documentation.

2. What Our BAA Covers

Our standard BAA addresses:

• The limited nature of PHI that may be associated with your use of Rorshack
• Our security safeguards and data handling commitments
• Breach notification procedures
• Permitted uses and disclosures of any PHI
• Obligations upon termination of the agreement

3. How to Request a BAA

To request a Business Associate Agreement, email us at hello@rorshack.com with the subject line "BAA Request" and include:

• Your full name and professional title
• Your practice name and address
• Your professional licence number and issuing state
• The email address associated with your Rorshack account

We will send you a completed BAA for countersignature within 3 business days. Executed BAAs are stored securely and are available upon request.

4. Important Limitations

Execution of a BAA with Rorshack does not guarantee that your practice is HIPAA-compliant. HIPAA compliance encompasses your entire practice, technology stack, and workflows. We strongly recommend consulting a HIPAA compliance officer or legal counsel to assess your obligations.

A BAA is available to licensed therapists, psychologists, social workers, and other licensed healthcare providers with active Rorshack subscriptions. BAA requests from individuals without active accounts will not be processed.

5. Contact

BAA requests and compliance questions: hello@rorshack.com