To comply with HIPAA, satisfactory assurances from a vendor acting as a business associate for electronic protected health information must be documented in a written contract or other arrangement that meets applicable requirements.

to ensure compliance with HIPAA

— Pyrana Information Security Policy.pdf

satisfactory assurances required by the vendor with respect to create, receive, maintain, or transmit electronic protected health information on behalf of the entity

— Pyrana Information Security Policy.pdf

be documented through a written contract or other arrangement with the business associate that meets the applicable requirements

— Pyrana Information Security Policy.pdf