Legal

Business Associate Agreement

Last updated: June 2026

Trustora provides a standard Business Associate Agreement (BAA) to any agency that is a covered entity or business associate and will upload Protected Health Information (PHI) to the platform. No PHI may be uploaded until a BAA is in place.

Key terms

Trustora uses PHI only to provide the Service.
Trustora implements reasonable safeguards, including encryption and access controls.
Trustora reports any breach to the agency within five business days.
On termination, PHI is returned or destroyed.
Trustora never sells PHI or uses it for marketing.

Our BAA is designed to satisfy the requirements of 45 CFR § 164.504(e).

To request the full BAA, contact support@trustora.com. During signup, you will be prompted to review and accept the BAA electronically.

This summary is provided for transparency and should be reviewed by a qualified healthcare attorney before publication.