> ## Documentation Index
> Fetch the complete documentation index at: https://docs.medera.info/llms.txt
> Use this file to discover all available pages before exploring further.

# BAA / DPA

> Business Associate Agreement and Data Processing Addendum

Medera operates as a HIPAA Business Associate. The standard BAA covers: - PHI handling, retention, and deletion

* Breach notification (within 24 hours)

* Subcontractor flow-down

* Audit rights

* Permitted uses and disclosures The standard DPA covers EU customers under GDPR. Request the current BAA / DPA from [hi@medera.info](mailto:hi@medera.info).