Does GetDocsSigned sign a BAA?
By William Heath, Founder · Last updated
Yes. GetDocsSigned signs a Business Associate Agreement (BAA) with every practice on its Healthcare plan, which costs $199 per month per practice. The BAA covers healthcare forms and their submissions, patient records and files, fax, and the physician order and authorization tracker. Regular and free GetDocsSigned accounts are not covered and must not be used for patient information.
The Healthcare plan includes unlimited staff logins and setup of your existing forms. Multi-location practices are quoted separately. You can read the BAA before you sign anything.
What the BAA covers
The BAA covers four parts of GetDocsSigned, and only on Healthcare accounts. Everything else stays outside it.
| Covered by our BAA (Healthcare accounts only) | Not covered, never use for patient information |
|---|---|
| Healthcare forms and their submissions, including signature and initials fields inside them | E-signature envelopes and their signed documents |
| Patient records and files | Document packets |
| Fax: sending, inbox, and matching faxes to orders | Payments |
| Physician order and authorization tracker | The AI form builder (use blank templates only) |
| Every regular or free GetDocsSigned account |
Email notifications never contain patient information. They only say a form came in, and staff open it inside GetDocsSigned. Healthcare accounts don't send automated reminders to patients.
The AI form builder stays available on Healthcare accounts for turning blank PDFs into forms. Never upload a completed form or anything with patient details to it.
How patient data is kept separate
Healthcare data never touches the system regular accounts use. It runs in its own AWS account, on HIPAA-eligible AWS services covered by Amazon's BAA. GetDocsSigned signs its own BAA with your practice on top of that.
- Separate patient link. Patients fill out healthcare forms on health.getdocssigned.com, not the regular forms site.
- Your practice's data is walled off. Each practice can only see its own patients, forms, and orders.
- A login for every staff member. No shared passwords, and you add or remove staff yourself.
- Every access is logged. Viewing, changing, downloading, and faxing patient data each leave an audit record.
- Our fax provider signs a BAA with us. Faxes are sent without the provider keeping copies.
No government body certifies software as HIPAA compliant. GetDocsSigned holds no SOC 2 report or other third-party certification. Your practice still needs its own risk analysis and policies; the BAA covers our part.
How to get the BAA
The BAA is signed before any patient information goes into GetDocsSigned. The order is:
- Ask for it. Use the Talk to us form and check "Email me your BAA before the call" to read it first.
- Short call. We go over your forms, your EHR, and how you track physician orders.
- Sign the BAA. Both sides sign before your account is switched to Healthcare.
- We set up your forms. Send your blank PDFs and we build them as healthcare forms.
- Start using it. Staff get their own logins and patients get the new form links.
Setup can be done the same day as the call.
FAQ
Is GetDocsSigned HIPAA compliant?
GetDocsSigned signs a BAA with practices on its Healthcare plan and runs healthcare data in a separate environment on HIPAA-eligible AWS services. No government body certifies software as HIPAA compliant, so look for a signed BAA and a clear list of what it covers.
Does GetDocsSigned sign a BAA on every plan?
No. Only the Healthcare plan, at $199 per month per practice, includes a BAA. Regular and free accounts are not covered.
How much does the GetDocsSigned Healthcare plan cost?
$199 per month per practice, with unlimited staff, a signed BAA, and setup of your existing forms. Multi-location practices are quoted separately.
Can I read the BAA before I sign up?
Yes. Check "Email me your BAA before the call" on the Talk to us form and we send it before we talk.
Are e-signatures covered by the BAA?
Signature and initials fields inside healthcare forms are covered. Separate e-signature envelopes and document packets are not, so don't send patient information through them.
Is fax covered by the BAA?
Yes. Sending faxes, the fax inbox, and matching faxes to physician orders are all covered on Healthcare accounts.
Does GetDocsSigned have a SOC 2 report?
No. GetDocsSigned holds no SOC 2 report or other third-party certification.
Who is the legal entity on the BAA?
Bacano Systems LLC, the company that makes GetDocsSigned.
How do we get started?
Tell us about your practice with the form below, and we'll set up a short call. If you want to read our BAA first, say so in the form and we'll email it before the call.
Please don't include patient information in this form. Healthcare accounts are set up by us with a signed BAA, so don't enter patient data into a regular trial account.