Business Associate Agreement overview

Last updated: October 24, 2026.

An overview of the Business Associate Agreement Bettar Platforms, Inc., through ClinikAPI, signs with customers on paid plans. The executed agreement is provided when you sign.

Bettar Platforms, Inc., through ClinikAPI, provides a HIPAA Business Associate Agreement (BAA) for all paid plans (Pro, Team and Enterprise). ClinikAPI is a product of Bettar Platforms, Inc., a Delaware corporation with its registered office at 8 The Green, Suite B, Dover, DE 19901, United States.

What is a BAA?

A BAA is a legally binding contract required by HIPAA when a covered entity (your organization) shares Protected Health Information (PHI) with a business associate (Bettar Platforms, Inc., through ClinikAPI). It defines:

How PHI may be used and disclosed
Safeguards required to protect PHI
Breach notification procedures
Termination and data return obligations

Requesting a BAA

BAAs are available on all paid plans. Current plan amounts are on the pricing page.

Plan	BAA Available
Free	No (synthetic data only)
Pro	Yes
Team	Yes
Enterprise	Yes (custom terms)

To request a BAA:

Upgrade to a paid plan in the Dashboard
Navigate to Settings > Compliance
Review and sign the BAA electronically

Enterprise customers receive a customized BAA with additional terms.

Technical Safeguards

Bettar Platforms, Inc., through ClinikAPI, implements the following safeguards as documented in the BAA:

Encryption at rest: AES-256 with cloud-managed KMS keys
Encryption in transit: TLS 1.2+ on all API endpoints
Access controls: API key authentication with tenant isolation
Audit logging: Every API request logged with FHIR resource context
Data isolation: Tenant-tagged resources with enforced _tag filtering
Breach notification: Within 15 business days of discovery for the business associate agreement, and within 24 hours for a personal-data breach under the data processing agreement

Contact

For BAA questions or custom enterprise agreements, contact [email protected].