Hushmail includes a BAA on its Healthcare and Professionals plans and marks its Small Business, Law and Personal plans as having no BAA. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| Hushmail for Small Business (all tiers) | Not covered |
| Hushmail for Law (all tiers) | Not covered |
| Hushmail for Personal Use (all tiers) | Not covered |
| Hushmail for Healthcare Basic | Covered |
| Hushmail for Healthcare Essentials | Covered |
| Hushmail for Healthcare Growth | Covered |
| Hushmail for Professionals | Covered |
How to get the BAA
It comes with the plan; Hushmail’s pages read do not describe the signing process, so ask Hushmail sales.
Proof from the vendor
- Hushmail Plans and PricingBAA Yes on Healthcare tiers, listed on Professionals, No on Small Business, Law and Personal
- Hushmail for HealthcareSigned BAA listed as a feature
- Do you need a Business Associate Agreement?BAA comes with the healthcare plan and also covers secure web forms
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.