Business Associate Agreements
We sign BAAs with covered entities. Here is what ours covers and how to request one.
Effective September 21, 2026
What a BAA is
A Business Associate Agreement (BAA) is the written contract HIPAA requires between a covered entity — such as a pharmacy, physician practice, hospital, or laboratory — and a vendor that handles protected health information on its behalf. Because medical courier work often involves PHI, we expect to sign one with you.
What our BAA covers
- The permitted and required uses and disclosures of PHI in connection with the delivery services.
- Our obligation to apply appropriate administrative, physical, and technical safeguards.
- Reporting obligations if we become aware of a privacy or security incident.
- Requirements for our subcontractors and couriers.
- Return or destruction of PHI when the relationship ends, where required.
- The term of the agreement and the conditions under which it may be terminated.
How to request one
Email hello@gomedroute.com with your organization name and a contact for your privacy or compliance team. We can typically turn a BAA around within a few business days, and we are happy to work from your form if you prefer.