Resources

Business Associate Agreement

Approva signs a Business Associate Agreement with every customer before handling any protected health information. The BAA is included with every engagement — no separate negotiation required for standard terms.

What the BAA covers

The agreement covers Approva's handling of PHI on behalf of covered entities — ambulatory surgery centers and their affiliated providers. It specifies permitted uses, breach notification obligations, and subcontractor requirements consistent with the HIPAA Omnibus Rule.

Standard terms

Our standard BAA is pre-signed and ready at contract execution. For customers who require custom terms or need to use their own BAA template, contact hello@approva.health with your requirements.

Security posture

For a full overview of the technical and administrative controls that support our BAA commitments, see the security and compliance page.