Business Associate Agreement
A full agreement draft for UP and a practice, with PHI protections, incident reporting, individual rights and return/destruction provisions.
Review the BAATrust & legal
Clear commitments.
Careful preparation.
Review UP’s policy documents and proposed agreements before commercial launch.
Privacy policy
The public-site privacy draft and existing service privacy policy, with their separate scopes explained.
Read the privacy policyTerms & acceptable use
Existing terms preserved, with commercial acceptable-use additions provided for review.
Read the termsData ownership & exit
Proposed record ownership, export, retention and offboarding provisions.
Review the data provisionsSecurity, with clear responsibilities.
UP includes role-based access, authenticator enrollment, account recovery and audit workflows. Effective protection also depends on the practice’s policies, the configured deployment and agreements with connected services. No HIPAA certification or guaranteed service level is represented here.
Commercial registration remains closed while legal and operational launch work is completed.
Documents for counsel
The review packet preserves the existing terms and privacy policy, adds public-site privacy, acceptable-use and data-exit provisions, and includes an integration agreement inventory and unresolved legal decisions. Required legal names, contacts and final service terms are left for verification.
Download the legal review packet (PDF)Review acceptable use