HIPAA & BAA

How ClaimYours AI approaches HIPAA, and what the Business Associate Agreement covers.

Draft — under review by counsel. Effective date to follow.

HIPAA and the Business Associate Agreement

ClaimYours AI is built around the requirements of the HIPAA Privacy and Security Rules. There is no official “HIPAA certification,” so we do not claim one. We do not describe the platform with compliance labels; we sign a Business Associate Agreement with every customer.

The BAA comes first

No protected health information (PHI) is uploaded until three things have happened: you sign up, we review and approve your account, and your practice accepts the Business Associate Agreement inside the platform. Only then can you upload claims.

No PHI on this website

This marketing website does not accept PHI. Our forms ask you not to include patient names, Medicaid IDs or claim details, and they refuse messages that look like they contain them. There is no file upload on this site.

What the BAA covers

The agreement is between your practice (the covered entity or business associate) and James Revenue AI LLC, d/b/a ClaimYours AI. In summary, the current draft covers:

  • Permitted uses. We use PHI only to provide the service: reading billing files and remittances, flagging problems, and drafting corrections and appeals for your review.
  • Safeguards. Administrative, physical and technical safeguards that protect the confidentiality, integrity and availability of PHI. PHI is stored in AWS in the United States and is encrypted at rest and in transit.
  • Reporting. We report unpermitted uses or disclosures, security incidents and breaches of unsecured PHI without unreasonable delay and within the time the HIPAA Rules require.
  • Subcontractors. Any subcontractor that handles PHI for us agrees in writing to substantially the same restrictions.
  • Access, amendment and accounting. We make PHI available so you can meet your obligations for access, amendment and accounting of disclosures.
  • Term and termination. On termination we return or destroy PHI where feasible, or keep protecting it for as long as we retain it.

Read the agreement

The agreement you accept inside the platform is the version of record. You can read the current draft at app.claimyoursai.com/baa. Acceptances are bound to the text shown at the time of acceptance.

Questions

Compliance questions are welcome before you sign up. Contact us or write to support@claimyoursai.com. See also our security overview.