Browse all Help Center topics
Help Center / Security & privacy / HIPAA safeguards and BAAs
HIPAA safeguards and BAAs
A set of extra controls for healthcare work, and how to request a Business Associate Agreement.
HIPAA safeguards are available on the Enterprise plan and arranged with our team. They are a set of controls, not a compliance certification.
What turns on
- Two-factor authentication is required for every team member.
- Automatic sign-out after 15 minutes of inactivity.
- Notification emails leave out file names, document titles, form names, ticket subjects and project names, so email doesn't carry sensitive detail.
- An audit log export (CSV) for your own records.
- The AI Assistant is switched off while safeguards are on.
Business Associate Agreement (BAA)
A healthcare organization needs a signed BAA with every vendor that handles patient data. On Settings → Security you can request a BAA: enter your organization and contact details and we'll follow up by email.
Don't store protected health information in Orbinly until a BAA with Orbinly is signed. Switching these safeguards on does not replace one.
Whether your overall use meets HIPAA depends on your own policies and agreements with all your vendors, too.
Didn't find what you needed?
Our team responds to every message personally.