HIPAA Business
Associate Agreement
Fully executed and included at no additional cost with every RSAI customer agreement. PHI never leaves your trust boundary.
Revenue Stream AI, Inc. executes a fully compliant HIPAA Business Associate Agreement (BAA) with every customer that handles Protected Health Information (PHI). The BAA is included at no additional cost and is a required component of every RSAI customer agreement.
What the BAA Covers
- →Designation of RSAI as a Business Associate under 45 CFR §164.504(e)
- →Permitted uses and disclosures of PHI strictly limited to providing contracted services
- →Obligation to implement HIPAA-required administrative, physical, and technical safeguards
- →Breach notification obligations within 72 hours of discovery per HITECH Act requirements
- →Subcontractor BAA requirements — all PHI-handling subprocessors are bound by equivalent obligations
- →Individual rights support — access, amendment, and accounting of disclosures
- →PHI is never used for AI model training, marketing, or any purpose outside the contracted services
- →Return or destruction of PHI upon termination of the agreement
Infrastructure & Safeguards
All PHI workloads run on Amazon Web Services infrastructure covered under Amazon's HIPAA BAA.
AES-256 encryption at rest. TLS 1.2+ for all data in transit. No unencrypted PHI storage.
Zero Trust access architecture on all public-facing endpoints. DDoS protection active.
Role-based access control. Comprehensive audit logging for all PHI access and modifications.
BAA execution is included with every RSAI agreement.
To request a copy of RSAI's standard BAA or to initiate the agreement execution process, contact your account representative or reach us directly.
Request BAA ExecutionOr email us directly at info@revenuestream.ai