Every Intake.Dental practice automatically receives an executed HIPAA Business Associate Agreement at no extra cost. Here's exactly what it covers, in plain English.
The BAA establishes the legal relationship between your dental practice (Covered Entity) and Intake.Dental (Business Associate), ensuring that Protected Health Information receives the safeguards HIPAA requires. It covers all PHI (patient names, Social Security numbers, medical record numbers, health histories, insurance details, and consent forms) that flows through the platform.
All Protected Health Information is encrypted at rest using AES-256 or equivalent industry-standard encryption.
Multi-factor authentication is required for all administrative accounts that can touch PHI.
Access to PHI is limited to authorized personnel on a need-to-know basis via RBAC.
Annual security audits and 24/7 monitoring of the production environment.
The BAA explicitly forbids Intake.Dental from doing any of the following with your patient data:
Current sub-processors handling PHI include Amazon Web Services, Supabase, and our email service providers. All are bound by their own executed BAAs with Intake.Dental.
The BAA is executed electronically during registration or checkout. You receive a confirmation at sign-up and can request a signed copy at any time. For questions about your BAA or to request an updated copy, contact our compliance team:
Legal entity: Dental Education, Inc. d/b/a Intake.Dental
Our compliance team will walk you through the specifics for your practice in a 20-minute call.
