For healthcare organizations requiring HIPAA compliance
A Business Associate Agreement (BAA) is a contract required by HIPAA between a covered entity — such as a healthcare provider, health plan, or healthcare clearinghouse — and a business associate (like CheapRX.AI) that creates, receives, maintains, or transmits Protected Health Information (PHI) on behalf of the covered entity. The BAA establishes the permitted uses and disclosures of PHI, requires safeguards to prevent unauthorized use, and ensures regulatory compliance.
CheapRX.AI implements the following technical, administrative, and physical safeguards:
Complete the form below and our team will reach out within 2 business days to discuss your BAA requirements.
The following third-party services may process data as part of the Service:
Database hosting and compute infrastructure. All data encrypted at rest. SOC 2 Type II, ISO 27001, HIPAA compliant.
Payment processing. Processes billing information for paid plans. PCI DSS Level 1 certified. Does not receive health data.
Email delivery. Processes email addresses and delivers price alerts, savings reports, and account notifications. SOC 2 Type II compliant.
Anonymized product analytics. Receives only anonymized usage events. No PHI or PII is transmitted to PostHog.
CDN and DDoS protection. Processes network traffic for performance and security. SOC 2 Type II, ISO 27001 compliant.