BusinessAssociateAgreement(BAA)
HIPAA terms for PHI processed by BlueHive as a Business Associate.
Review BlueHive's standard Business Associate Agreement framework, including permitted PHI use, safeguards, breach reporting, subcontractor flow-down obligations, and termination requirements.
BlueHive Business Associate Agreement (BAA)
This Business Associate Agreement ("BAA") describes the HIPAA terms that apply when BlueHive Health, LLC ("BlueHive") creates, receives, maintains, or transmits Protected Health Information ("PHI") on behalf of a HIPAA Covered Entity or another Business Associate customer.
This page publishes BlueHive's standard BAA framework for transparency and operational planning. A signed BAA between BlueHive and your organization controls the parties' obligations for PHI and supersedes inconsistent terms in the Terms of Use, Privacy Policy, and role-specific platform agreements, solely with respect to PHI.
No PHI may be transmitted to BlueHive until a BAA is fully executed. To request execution, use the digital BAA form.
If your legal team wants a concrete draft to review, use our Sample BAA Template or Download Sample BAA (PDF). If you are ready to execute, the digital BAA form is the fastest path for countersignature and activation.
Scope and Applicability
The BAA applies only to PHI processed by BlueHive in its role as Business Associate. It does not apply to information that is not PHI or to customer workflows that do not involve PHI. Covered services, environments, and subprocessors are identified in BlueHive documentation and may be updated over time with reasonable notice as required by contract and law.
Permitted Uses and Disclosures
BlueHive may use and disclose PHI only as permitted by the signed BAA, as required by law, and as necessary to perform services for the customer. BlueHive applies the minimum necessary standard where required and does not use PHI for unrelated product marketing or model training.
Safeguards and Security Program
BlueHive maintains administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of PHI, including access controls, audit logging, encryption in transit and at rest, workforce training, incident-response procedures, and role-based restrictions aligned with the HIPAA Security Rule.
Security Incident and Breach Notification
BlueHive will report security incidents and breaches of unsecured PHI to the customer as required by the BAA and applicable HIPAA rules, including available details needed for the customer's notification obligations. Notification timing, required contents, and cooperation duties are specified in the signed BAA.
Customers remain responsible for their own HIPAA compliance program, including permissible disclosures, role configuration, notice obligations, and downstream workflows outside BlueHive systems.
Subcontractors and Flow-Down Obligations
Where BlueHive engages subcontractors that create, receive, maintain, or transmit PHI on BlueHive's behalf, BlueHive requires written agreements imposing restrictions and safeguards that are at least as protective as BlueHive's own BAA obligations. Current third-party processing relationships are summarized on the Subprocessors page.
Individual Rights and Regulatory Cooperation
To the extent required by HIPAA and the signed BAA, BlueHive supports customer obligations for access, amendment, and accounting requests, and makes relevant records available to regulators as required by law.
Termination and PHI Return or Destruction
Upon termination of services or the BAA, BlueHive will return or destroy PHI when feasible and as required by the signed BAA. If retention is required by law or technically necessary for limited purposes, BlueHive continues to protect retained PHI and limits use and disclosure to the purposes permitted in the BAA.
How to Request and Execute a BAA
- Complete the digital BAA form with signer details.
- Provide legal entity name, signatory name/title/email, and your primary BlueHive account contact.
- BlueHive legal operations will route the agreement for signature and provide an executed copy for your records.
- Do not transmit PHI to BlueHive until execution is complete and confirmed by BlueHive.
Submit a Signed BAA
Use this form to submit your BAA signer details. BlueHive routes the submission to Legal and Sales, emails the signer copy, and logs the submission in our lead workflow so your account team can follow up.
Before You Submit
The digital form below is the fastest route and keeps your submission in BlueHive follow-up workflow automatically. If procurement requires a file-first process, you can still use the PDF template.
- Use your legal entity name exactly as it appears in your contracting records.
- The typed signature must match the authorized signer full name.
- After submission, BlueHive sends a confirmation copy to the signer email.
- PDF fallback: Download Sample BAA (PDF).
- Need to review language first? Start with the sample at /legal/business-associate-agreement/sample.
Questions About Our Policies?
Our team is here to help. Reach out if you have questions about our privacy practices, terms of use, or platform agreements.