To comply with HIPAA, satisfactory assurances from a vendor that creates, receives, maintains, or transmits electronic protected health information on behalf of the entity must be documented in a written contract or other arrangement meeting applicable requirements.

to ensure compliance with HIPAA

— Pyrana Information Security Policy.pdf

satisfactory assurances required by the vendor with respect to create, receive, maintain, or transmit electronic protected health information on behalf of the entity

— Pyrana Information Security Policy.pdf

be documented through a written contract or other arrangement with the business associate that meets the applicable requirements

— Pyrana Information Security Policy.pdf