Legal

Business Associate Agreement

Version 2026-08-10
This Business Associate Agreement ("BAA") is entered into between the healthcare provider or organization accepting this agreement ("Covered Entity") and ClariteNote ("Business Associate"). Electronic acceptance through ClariteNote constitutes acceptance of this BAA.

1. Purpose

ClariteNote may create, receive, maintain, or transmit Protected Health Information ("PHI") on behalf of the Covered Entity while providing clinical documentation and related services.

2. Permitted Uses and Disclosures

ClariteNote may use or disclose PHI only as necessary to provide the services requested by the Covered Entity, as permitted by this agreement, or as required by law.

3. Safeguards

ClariteNote will maintain appropriate administrative, physical, and technical safeguards designed to protect electronic PHI and comply with applicable provisions of the HIPAA Security Rule.

4. Reporting

ClariteNote will report to the Covered Entity any use or disclosure of PHI not permitted by this agreement, including breaches of unsecured PHI and applicable security incidents, as required by law.

5. Subcontractors

ClariteNote will require subcontractors that create, receive, maintain, or transmit PHI on ClariteNote's behalf to agree to appropriate restrictions, safeguards, and HIPAA obligations.

6. Individual Rights

To the extent applicable to ClariteNote's services, ClariteNote will assist the Covered Entity with access, amendment, and accounting obligations required by HIPAA.

7. Minimum Necessary

ClariteNote will limit uses, disclosures, and requests for PHI to the minimum necessary where the HIPAA minimum-necessary standard applies.

8. Covered Entity Responsibilities

The Covered Entity is responsible for using ClariteNote lawfully, obtaining any required patient recording or disclosure consent, maintaining its own HIPAA policies, and notifying ClariteNote of restrictions that affect ClariteNote's permitted use of PHI.

9. Termination

Upon termination of the relationship, ClariteNote will return, destroy, or continue protecting PHI as required by HIPAA, applicable law, customer instructions, and feasible technical limitations.

10. HHS Access

ClariteNote will make applicable records relating to its use and disclosure of PHI available to the U.S. Department of Health and Human Services when required by HIPAA.

11. Electronic Acceptance

By affirmatively accepting this BAA through ClariteNote, the user represents that they have authority to enter into this agreement for themselves or the healthcare organization they represent.

12. Relationship to Terms

This BAA is incorporated into the ClariteNote Terms of Service. If this BAA conflicts with the Terms regarding PHI or HIPAA responsibilities, this BAA controls for those matters.

13. Contact

ClariteNote
legal@claritenote.com