Business Associate Agreement Review
Production PHI workflows require completed BAA onboarding, customer Google Workspace BAA attestation, platform owner approval, and customer-controlled Drive destination setup before request links are generated.
How the BAA Fits the Workflow
Before production PHI
The customer BAA and Workspace BAA attestation are readiness gates. The app blocks production request link generation until those organization records are complete and the platform owner approves PHI access.
Customer Workspace BAA required
Drive delivery depends on the customer's Google Workspace environment and the customer's own BAA coverage for the approved destination.
Signed archive in Account
Organization owners can complete the in-app BAA signing flow during onboarding. The signed PDF and evidence record are archived for the workspace; request links remain locked until retained customer BAA and Workspace BAA evidence are reviewed and approved for PHI access.
Legal Copy Status
Final customer legal documents should be reviewed with counsel and supplied through the onboarding process. Public pages should not be treated as a completed contract or as legal advice.