This Business Associate Agreement (“Agreement”) is entered into between Cohera, LLC (“Business Associate”) and the subscribing clinician or practice (“Covered Entity”). This Agreement is effective as of the date the Covered Entity accepts or executes it and is intended to comply with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended.
Business Associate may create, receive, maintain, or transmit limited Protected Health Information (“PHI”) on behalf of Covered Entity solely for purposes of user identification, communication, and client engagement as enabled by the Cohera platform.
Business Associate may use or disclose PHI only as necessary to provide services under the Subscription Agreement, to support platform operations, to comply with legal obligations, or as otherwise permitted by HIPAA.
Business Associate shall implement appropriate administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of electronic PHI in accordance with the HIPAA Security Rule.
Business Associate shall report any Breach of Unsecured PHI to Covered Entity without unreasonable delay and in no event later than sixty (60) days following discovery.
Business Associate may use subcontractors who agree in writing to the same restrictions and safeguards required under this Agreement.
This Agreement shall terminate when Business Associate no longer maintains PHI on behalf of Covered Entity. Upon termination, PHI shall be returned or securely destroyed if feasible.
This Agreement is subject to the limitation of liability and governing law provisions of the Subscription Agreement.