Our BAA limits to what extent we can process the data provided to ensure compliance with HIPAA. This includes:
Upheal can only use and disclose ePHI as permitted or required under the BAA, to fulfill the Upheal Terms and Conditions, or as required by law
Upheal will notify you if data under the BAA is subject to subpoena
ePHI will be kept confidential and used only for the purpose for which it was disclosed
Upheal will inform the Covered Entity of any security breaches or incidents