HIPAA guide map
HIPAA Business Associates Guide
Review business associate agreements, vendor management, shared responsibility, and third-party risk.
Reviewed August 2026
Available guidance
- Business Associates
Learn when a vendor is a business associate, what a BAA should cover, and how subcontractors extend your compliance responsibilities.
- Business Associate Agreements
A practical center for deciding when a BAA is needed and connecting contract terms to the vendor's actual service.
- HIPAA Vendor Management
Connect business associate inventory, security review, contract scope, monitoring, and offboarding into one repeatable practice.