CommUnity HIPAA

HIPAA (Health Insurance Portability and Accountability Act) is a federal law that was established in 1996 to protect the personal health information and medical records of patients in the United States.

As of April 2024, the Community voice platform was found to have the physical, technical, and administrative safeguards in place that are required for HIPAA compliance.  As a result, the Community voice platform is now certified as HIPAA compliant.  Sangoma is happy to offer BAAs (Business Associate Agreements) to its customers who require a BAA to become a customer or renew their relationship with Sangoma.

PROCESS FOR REQUESTING A BAA

1. An email needs to be sent to Legal@sangoma.com with the subject line “BAA Request- [Customer Name].” Customer-specific information must include the following:

   1. Legal Name of Customer: This MUST match how the business has been established/ registered or incorporated.  This is also to match the customer’s name on the Community contract.

   2. Name, Title and Email of Authorized Signatory: Since this is a legally binding document, only individuals authorized to represent involved parties are permitted to sign.  Provide the 1) first and last name, 2) title, and 3) business email address of this authorized representative. 

   3. Physical Address: Full mailing address of the customer - this is where legal notices may be sent.  P.O. Boxes are not acceptable. 

   4. Attention Name: Who within the customer’s organization is to receive official notifications - this is typically the Chief Security or Legal Officer or Compliance Officer

   5. Email Address for Notices: This would be for legal notices specifically and may differ from the email address above in 1.b.

2. You must indicate in your email to Legal whether this customer intends to subscribe to Call Recording or not.

3. Once the information above is received by the Sangoma Legal team and reviewed for completeness, the BAA is prepared and emailed to noted authorized signatories (typically by RightSignature).

4. The electronic BAA will follow the predetermined path of signatures until it has been signed by all parties.

5. Each signing party will automatically receive a fully executed BAA once completed. Legal will maintain Sangoma’s official version of the BAA.

In the event that the Customer would like to review the verbiage of the BAA prior to it being emailed for signatures, it must be mentioned in the original email request to Legal, and a draft can be furnished as needed. Do not offer to send a draft of the BAA; please wait for the request to be made. Redlining the BAA is not common practice and slows down the sales process.