Legal
Business Associate Agreement
Last updated: June 2026
Trustora provides a standard Business Associate Agreement (BAA) to any agency that is a covered entity or business associate and will upload Protected Health Information (PHI) to the platform. No PHI may be uploaded until a BAA is in place.
Key terms
- Trustora uses PHI only to provide the Service.
- Trustora implements reasonable safeguards, including encryption and access controls.
- Trustora reports any breach to the agency within five business days.
- On termination, PHI is returned or destroyed.
- Trustora never sells PHI or uses it for marketing.
Our BAA is designed to satisfy the requirements of 45 CFR § 164.504(e).
To request the full BAA, contact support@trustora.com. During signup, you will be prompted to review and accept the BAA electronically.
This summary is provided for transparency and should be reviewed by a qualified healthcare attorney before publication.