A Business Associate Agreement (BAA) is a legal agreement required under U.S. law for certain healthcare providers and organizations.
You typically need a BAA if you are considered a Covered Entity under HIPAA. In most cases, this includes healthcare providers, hospitals, and other organizations that directly handle patient health information.
If you're unsure whether this applies to you, we recommend reviewing guidance from the U.S. Department of Health & Human Services (website found here).
What is a BAA?
A BAA is a contract between you (the healthcare provider or organization) and doxy.me.
It outlines how patient data is protected and ensures that doxy.me meets HIPAA requirements when handling protected health information (PHI) on your behalf.
If you are required to follow HIPAA regulations, having a BAA in place is an important step in staying compliant.
Individual vs. Clinic-level BAAs
Doxy.me offers two types of BAAs, depending on how you use the platform:
Individual BAA
Designed for solo providers
Covers a single user and their personal room
Available on Free plans
This is typically sufficient if you work independently and do not need to coordinate care across multiple users.
Clinic-level BAA
Covers your entire clinic, including all users within it
Managed at the clinic level by an Owner or Admin
Available on the Premium plan
If you’re a solo provider on Premium, this BAA still applies to you - your clinic simply includes one user. This option is recommended if you:
Want a single agreement that covers your full account
Plan to add providers or staff over time
Need shared workflows or coordination across people
What happens when you upgrade or downgrade?
Your BAA status depends on your plan:
Upgrading to Premium
You’ll gain access to a clinic-level BAA
This can replace individual BAAs and cover your entire team under one agreement
Downgrading from Premium
Your clinic-level BAA will no longer apply
Each individual provider will need to ensure they have their own BAA (if required)
Free plans
Only support individual BAAs
Each provider is responsible for their own agreement
Where to find your BAA
You can review and manage your BAA from the BAA page of Settings.
💡 If you have any other questions, please contact our support team