HIPAA Compliance

Business Associate Agreement

DOKit provides signed Business Associate Agreements (BAAs) for all customers processing protected health information (PHI).

What is a Business Associate Agreement?

Under HIPAA regulations, a Business Associate Agreement (BAA) is a contract between a HIPAA-covered entity and a vendor (business associate) that creates, receives, maintains, or transmits protected health information (PHI).

The BAA ensures that DOKit, as your business associate, will appropriately safeguard any PHI we process on your behalf and comply with HIPAA requirements.

Who Needs a BAA?

You need a BAA with DOKit if you are:

  • A healthcare provider (hospital, clinic, practice, etc.)
  • A health plan or insurance company
  • A healthcare clearinghouse
  • A business associate of any of the above

If you process documents containing patient names, medical record numbers, diagnoses, treatment information, or other PHI, you need a signed BAA before uploading to DOKit.

What Our BAA Covers

DOKit's Obligations

  • Implement appropriate safeguards for PHI
  • Report security incidents and breaches
  • Ensure subcontractors comply with HIPAA
  • Return or destroy PHI upon termination

Infrastructure Coverage

  • AWS infrastructure (BAA signed)
  • OpenAI processing (BAA signed)
  • All data storage and processing
  • Document intake and output delivery

How to Request a BAA

BAAs are available on all DOKit plans at no additional cost.

1

Contact Us

Email [email protected] with your company name and contact information.

2

Review & Sign

We'll send our standard BAA for your review. Most customers sign within 24-48 hours.

3

Start Processing

Once signed, you're cleared to process PHI through DOKit.

Ready to get started?

Request your BAA today — typically signed within 24-48 hours.