HIPAA Business Associate Agreement

BillingBench operates as a HIPAA Business Associate under 45 CFR §164.504(e) for workspace users who are covered entities or business associates under HIPAA. The Business Associate Agreement is executed at workspace signup — no separate request or form is required. The BAA covers workspace features that store denial queue data and saved appeal letters, which may contain account numbers or claim identifiers that constitute PHI in context.

PHI-by-design protection: BillingBench's public tools — including the ERA Parser and Appeal Letter Builder — process data exclusively in browser memory and transmit no data to BillingBench's servers. This means these tools can be used with PHI-containing files (835 ERA remittance files, for example) without triggering BAA obligations, because no PHI is disclosed to BillingBench as a business associate. The BAA applies to workspace storage features only. Contact support@billingbench.com for BAA questions or enterprise BAA customization requests.

• Security architecture and compliance details
• Privacy policy