Business Associate Agreement (BAA)

What is a Business Associate Agreement?

A Business Associate Agreement (BAA), is a legal document required under the Health Insurance Portability and Accountability Act (HIPAA). This agreement is established between a HIPAA-covered entity (such as a healthcare provider or health plan) and a business associate. A business associate is any entity that performs activities involving the use or disclosure of protected health information (PHI) on behalf of or provides services to a covered entity.

When a user of 3Shape's products and services enters into a Business Associate Agreement with 3Shape?

3Shape becomes Business Associate in cases when 3Shape cloud services are used by the customer, as then 3Shape will act on behalf of the customer and will maintain an ePHI database on behalf of the customer in an environment that does not belong to the customer and is located on a subcontractor’s digital premises.

As of today, 3Shape acts a Business Associate providing the following services:

• 3Shape Unite Cloud
• 3Shape Communicate
• 3Shape Cloud Storage
   

When and in what form is the data processing agreement concluded?

The BAA is concluded before the user starts using the service. The BAA document will be presented for acceptance before using the service by checking a checkbox. It should be accepted by a person authorized to represent your company (3Shape Account on Company level). The concluded BAAs and their dates of conclusion can be found in the Company's 3Shape Account.

Where can I find the text of the BAA?

Below, you can find the BAA content for all 3Shape services:

Who should I contact if I have questions about BAA?

We encourage you to read all information regarding Privacy and Data protection in our Help Center, but if you would still like to contact us directly, please write to dpo@3Shape.com.