Business Associate Agreement

Sothcare provides a Business Associate Agreement for covered-entity customers before handling PHI. The template is available during onboarding or by request.

Security controls include AWS BAA coverage, AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, MFA for admin roles, and 7-year audit retention.