Skip to main content
Organization Admins can review and accept a Business Associate Agreement (BAA) from organization settings. Only Organization Admins can view or accept it, the same access gate used for the Team settings page, since acceptance is binding on the entire organization rather than an individual user’s account. If your organization is a covered entity or business associate under HIPAA and is handling protected health information (PHI) through the platform, a signed BAA must be on file. Otherwise, your organization should not input any PII or PHI. The BAA defines how PHI is used, disclosed, and safeguarded, and what each party is responsible for. Jaspari ensures its own technologies and processes are aligned with HIPAA standards regardless of your BAA status, but it remains the covered entity’s or business associate’s responsibility to take proper safeguards to protect volunteer data that does not originate from our platform.
Our HIPAA-compliant infrastructure (multi-factor authentication (MFA), role-based access controls, audit logs, visibility controls, and volunteer consent logging) is universally accessible and equally applied to every organization on the Studies Platform.

​
Reviewing and accepting

The settings page embeds the current BAA document in full for review. To accept it, an Organization Admin checks a confirmation box stating they’ve read and agree to the agreement on behalf of the organization and are authorized to accept it, then confirms. Once accepted, the page displays who accepted it and the date, and the checkbox flow is replaced with that confirmation for every admin who visits the page afterward. Acceptance applies to your entire organization. If the agreement is later changed, it is sent out again for a new signature.

Related topics

Setup and LaunchPlatform RepresentativeBilling CyclesInviting Team MembersLaunch Your First Study