BAA (Business Associate Agreement)
Legal
A HIPAA-required contract between a Covered Entity and any vendor that handles Protected Health Information on its behalf. Without a signed BAA, sharing PHI with a vendor, including a cloud-hosted AI service, is itself a HIPAA violation.