subprocessors data sharing · Privacy Policy
Prana policy finding
“ All third-party vendors that access PHI are bound by HIPAA Business Associate Agreements (BAAs) that require them to use PHI only for specified purposes, maintain safeguards, report breaches immediately, and return or destroy PHI upon contract termination.”
- Document
- Privacy Policy
- Captured
- 2026-09-25
- Location
- Part 7 (Business Associate and Subcontractor Management)
- Snapshot SHA-256
- c4d334034510ab9e609c4363769703fb2130aa8d0797687c4b9519b2ec201060
Informational only, not legal advice. Terms change; verify the source and capture date.