Legal

Business Associate Agreement

The standard agreement Sora LLC executes with covered-entity clients before any protected health information is exchanged.

Template version: [VERSION] • Last updated: [DATE]

This page is a context/landing page only — it is not the binding BAA. The executable agreement is a counsel-reviewed document. Decide before publishing whether the full template text is displayed inline on this page or offered as a downloadable PDF, and have counsel confirm which is appropriate. Also confirm the entity name throughout the executable document reads "Sora LLC" (earlier template drafts carried an incorrect entity name).

Purpose

Sora LLC acts as a business associate to the dental practices and resellers it serves. Before any protected health information is created, received, maintained, or transmitted on a client's behalf, the parties execute a Business Associate Agreement that sets out how that information is safeguarded, used, and returned or destroyed.

What the agreement covers

The standard BAA addresses the obligations required under HIPAA, including permitted uses and disclosures, safeguards, breach notification, subcontractor flow-down, the handling of protected health information on termination, and the maintained list of subprocessors.

The current subprocessor list incorporated by the agreement is published at sora-llc-group.com/legal/subprocessors.

Reseller and white-label arrangements

Where Sora LLC's services are delivered through a reseller, the agreement chain runs from the practice to the reseller to Sora LLC. The applicable instrument depends on that relationship; clients in a white-label arrangement should confirm the contracting path with their reseller.

Confirm with counsel how the reseller-chain case is presented publicly, and whether a separate reseller addendum should be referenced here.

Requesting or reviewing the agreement

Prospective clients and their advisors may request the current template for review.

Decide the mechanism: inline text, a downloadable PDF link, or a request-by-contact flow. Add the contact or link once chosen.