Microsoft
Glazco Technologies LLC maintains HIPAA-related Business Associate Agreement documentation with Microsoft for applicable covered services. Service eligibility and configuration determine scope.
How Business Associate Agreements fit into ReportRocket’s security and vendor-review framework.
A Business Associate Agreement addresses defined HIPAA responsibilities for covered activities. It is one component of a broader contractual, technical and operational framework.
Under HIPAA, a BAA may be required when a service provider acts as a business associate and creates, receives, maintains or transmits protected health information on behalf of a covered entity or another business associate. Whether a BAA is required depends on the customer, services, and actual data involved.
A BAA allocates specific safeguards and responsibilities; it does not independently certify a product or establish that every deployment is compliant.
Glazco Technologies LLC maintains HIPAA-related Business Associate Agreement documentation with Microsoft for applicable covered services. Service eligibility and configuration determine scope.
Glazco Technologies LLC maintains a Business Associate Agreement with OpenAI. Applicable services, data flows and contractual terms determine coverage.
Agreements between Glazco and its technology providers do not substitute for customer-facing healthcare contractual terms where those terms are required.
Healthcare organizations evaluating ReportRocket can request discussion of a customer BAA through their Glazco business representative. Requests are assessed in conjunction with the intended use, account structure, applicable service scope and other contracting requirements.
Identify the organization, relevant workflows and expected categories of patient information.
Evaluate responsibilities, permitted uses, incident notifications, subprocessors and other applicable provisions.
Align contractual coverage with identity, Gateway, reporting and operational practices before PHI is used.
Our Security & Trust Center describes the platform’s security approach and service providers. Supporting materials may be shared through an appropriate vendor-review process. Confidential third-party BAAs and internal infrastructure documentation are not posted for public download.
Coordinate a vendor review or BAA discussion through your existing Glazco contact.