To comply with HIPAA, satisfactory assurances from a vendor handling electronic protected health information on behalf of the entity must be documented through a written contract or other arrangement that meets applicable requirements.

to ensure compliance with HIPAA

— Pyrana Information Security Policy.pdf

satisfactory assurances required by the vendor with respect to create, receive, maintain, or transmit electronic protected health information on behalf of the entity

— Pyrana Information Security Policy.pdf

be documented through a written contract or other arrangement with the business associate that meets the applicable requirements

— Pyrana Information Security Policy.pdf