DEMONSTRATION ENVIRONMENT — ALL PATIENT AND OPERATIONAL DATA IS SYNTHETIC
CARE Authority — Powered by AOR Medical Solutions

Business Associate Agreement (BAA)

Template — For legal review and execution before production use

This page outlines the framework for the Business Associate Agreement that must be executed between AOR Medical Solutions and any covered entity or business associate that wishes to use AOR ONE™ CARE AUTHORITY to store, process or transmit protected health information (PHI).

Parties

Business Associate: AOR Medical Solutions LLC, San Juan, Puerto Rico.
Covered Entity / Counterparty: the organization named in the executed agreement, at the address stated therein.

Purpose

AOR Medical Solutions provides the AOR ONE™ CARE AUTHORITY platform for clinical continuity, authorization intelligence, appeals documentation, DME logistics, compliance oversight and related operational workflows. The counterparty may disclose PHI to the Business Associate solely to the extent necessary for those purposes.

Permitted uses and disclosures

  • Use PHI only as necessary to perform services for the counterparty.
  • Disclose PHI only to workforce members, agents or subcontractors with a need to know.
  • Comply with applicable HIPAA Security Rule and Breach Notification Rule requirements.
  • Report security incidents and breaches in accordance with the agreement timeline.

Subcontractors

Any cloud infrastructure, AI gateway, email, fax or tracking subcontractor used by AOR Medical Solutions will be bound to equivalent safeguards and, where required, its own BAA with AOR Medical Solutions.

Term and termination

Effective date: the date of last signature by both parties. Either party may terminate for breach. Upon termination, PHI will be returned or destroyed in accordance with the counterparty's written instructions, subject to legal retention requirements.

This is a template only. Do not rely on it as an executed agreement. Contact your legal counsel to draft, negotiate and sign the final BAA before entering PHI into the system.

AOR ONE™, CARE AUTHORITY™, AOR HealIQ™ and associated systems are proprietary platforms and intellectual property of AOR Medical Solutions.