Business Associate Agreement
eBillRCM acts as a Business Associate when we handle Protected Health Information for covered-entity clients. A signed BAA is non-negotiable — on both sides — before go-live.
BAA before PHI
We do not receive claims files, eligibility extracts, or other PHI until a Business Associate Agreement is fully executed.
HIPAA & HITECH alignment
Our BAA covers permitted uses and disclosures for payment and healthcare operations, breach notification timelines, and subcontractor flow-down obligations.
SOC 2 Type II controls
Administrative, technical, and physical safeguards are maintained under our SOC 2 Type II program — encryption, access control, audit logging, and workforce training.
Your agreement or ours
We can start from eBillRCM' standard BAA or review your organization's template. Material terms must meet HIPAA Business Associate requirements.
Request a BAA
Email info@ebillrcm.com or use the contact form. Include your practice legal name, NPI (if available), and whether you prefer our template or yours.
Phone (716) 342-1002 · 1521 Blake St STE 12838, Denver, CO 80202