Business Associate Agreement

Our HIPAA Posture

Territory Intel Pro is designed to eliminate PHI exposure. The database stores only de-identified business data (account names, visit logs, referral statuses, expense records). Patient identifiers are never required in any field.

The Service stores no patient identifiers at all. Referrals are tracked by an auto-assigned referral number, never a patient name or record number. Free-text fields scan every entry on save and automatically reject anything resembling a patient identifier (names, dates of birth, SSNs, MRNs, phone numbers, email addresses, street addresses). Because no PHI is stored, there is no PHI to decrypt, leak, or breach.

Obligations of Territory Intel Pro

• Implement and maintain appropriate administrative, physical, and technical safeguards
• Not use or disclose PHI other than as permitted by this agreement or required by law
• Report any security incident or breach involving PHI within 72 hours of discovery
• Make internal records available to HHS for compliance audits
• Return or destroy all PHI upon termination of the agreement
• Ensure subcontractors (Supabase, Stripe) agree to equivalent restrictions

Obligations of Customer

• Not attempt to enter PHI into any field (the Service rejects patient identifiers on save)
• Maintain the security of user credentials and devices
• Promptly report any suspected breach or unauthorized access
• Comply with applicable HIPAA Privacy and Security Rules

Breach Notification

In the event of a breach of unsecured PHI, Territory Intel Pro will notify the Customer within 72 hours of discovery. The notification will include: the nature of the breach, the data involved, steps taken to mitigate harm, and recommended actions for the Customer.

Data Return & Destruction

Upon termination of the subscription, all Customer data will be retained for 30 days for recovery purposes, then permanently deleted from all production and backup systems. The Customer may request immediate deletion or a data export (CSV/XLSX) prior to deletion.

Request the Full BAA

This page summarizes our BAA terms. To receive the full executed Business Associate Agreement for your compliance files, contact us at support@territoryintelpro.com with your organization name and we will provide a signed PDF within 5 business days.