Can I sign a BAA with MiOpsAI for healthcare data?

Business Associate Agreement (BAA) support is targeted for Q3 2026 on the Enterprise+ tier; it is not yet available in the current private beta. If you handle Protected Health Information (PHI) under HIPAA, you should not store PHI in MiOpsAI until BAA support ships and you've executed an agreement.

What a BAA covers

Under HIPAA, any vendor that creates, receives, maintains, or transmits PHI on behalf of a covered entity is a Business Associate and must sign a BAA. The BAA contractually binds the vendor to:

• Use PHI only for the services described in the underlying agreement
• Implement appropriate safeguards (administrative, physical, technical)
• Report breaches within statutory timelines
• Ensure subcontractors (in our case, AI providers) also sign BAAs
• Return or destroy PHI on contract termination

The MiOpsAI BAA chain

1. You ↔ MiOpsAI — the BAA you'll sign at Enterprise+ tier
2. MiOpsAI ↔ OpenAI — already in place via OpenAI's enterprise BAA program
3. MiOpsAI ↔ Anthropic — in place via Anthropic's enterprise BAA
4. MiOpsAI ↔ AWS / hosting — already covered under AWS BAA
5. MiOpsAI ↔ SMS / email gateways — Twilio and SendGrid both offer BAAs we'll execute

What's needed before we can sign your BAA

• Annual third-party HIPAA security audit (in progress)
• BAA-specific tenant configuration (PHI classification, stricter audit logs, encrypted backups)
• HIPAA-tier support SLA documentation
• Internal HIPAA training and access controls for our team

What healthcare practices do today

Beta healthcare customers use MiOpsAI for non-PHI workflows: general office operations, vendor management, marketing/SEO via VisBuilt, social via SallyAI, internal team coordination. Clinical and patient communications stay in their EHR until our BAA ships.

How to get on the BAA waitlist

Request access and tell us you need HIPAA. We'll add you to the BAA waitlist and notify you the moment it's available. Enterprise+ tier details here.