We handle protected health information on your behalf, which makes us your business associate. HIPAA §164.502(e)(1)(ii) and §164.308(b) require the agreement to be in place before we receive PHI — not afterwards.
So until the agreement is executed, this workspace is read-only.
The agreement needs both signatures: yours, and our countersignature. Only then does the gate open.
You sign from this page. We countersign, usually within one business day, and nothing further is needed from you in the meantime. If your workspace is blocked, this page tells you which of the two signatures is outstanding.
Customers who accepted our agreement before the current signing flow existed are already covered — the earlier acceptance still counts and nothing is blocked.
Reading keeps working. The block applies to writes, because the point is to stop PHI arriving before the agreement covers it — not to make the product unusable while you wait.
Deliberately still available so you're never stuck behind a door with no handle:
Other writes are refused with an explanation naming the real blocker, rather than a generic error.
If your organization requires its own BAA rather than ours, upload it here. It lands as pending review rather than executed, because an agreement nobody on our side has read is not one we have agreed to. Someone reviews it and either countersigns or comes back to you.
Two different things share the name:
Any member can read this page and see the status. Signing is an org admin action. Delegated admins can sign; the countersignature is ours alone.