Compliance Status

HIPAA-ALIGNED
ACCESS CONTROLLED

Legal Contact

compliance@northstarclaim.com

Business Associate
Agreement.

Business Associate Agreement template for NorthStarClaim.

1. Definitions

"Protected Health Information" (PHI) shall have the same meaning as the term "protected health information" in 45 CFR § 160.103.

2. Permitted Uses & Disclosures

Business Associate (NorthStarClaim) may use or disclose PHI only as permitted by this Agreement or as required by law. Clinical data is processed transiently for claim work and is not retained after transmission.

3. Safeguards

Business Associate shall use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Agreement. This includes TLS 1.3 encryption in transit and role-based access controls.

4. Breach Notification

Business Associate shall notify Covered Entity (Subscriber) of any breach of unsecured PHI in accordance with 45 CFR § 164.410 within the mandated reporting window.

Last Updated: July 15, 2026 • Protocol v4.2026