- Breach notification (within 24 hours)
- Subcontractor flow-down
- Audit rights
- Permitted uses and disclosures The standard DPA covers EU customers under GDPR. Request the current BAA / DPA from hi@medera.info.
Baa
BAA / DPA
Business Associate Agreement and Data Processing Addendum
Medera operates as a HIPAA Business Associate. The standard BAA covers: - PHI handling, retention, and deletion