Legal
Business Associate Agreement
Cavaridge has a standard BAA. Healthcare-tier service requires it executed before service activation.
Effective date: 2026-05-05
Draft — operator/legal review pending. PROD-09 ships the intake form; operator + counsel must approve the BAA template (docs/legal/baa-template.md) before counter-signing any incoming request.
What's covered
- Cavaridge Healthcare suite (Cavaridge AEGIS healthcare scope, Cavaridge Ember in production cutover, Nurse Tools as documented public carve-out)
- Any tenant flagged "healthcare" tier with PHI flowing through Cavaridge surfaces
- Sub-processor flow-down per /trust/subprocessors
Timeline
We aim for a 5-business-day first-touch with the standard BAA + redlines path. Most BAAs execute within 2–3 weeks; complex or covered-entity-specific terms take longer.
Important
PHI must NEVER reach Cavaridge surfaces before BAA execution. Healthcare suite signup is gated on the BAA-acceptance step. If you have an unsigned BAA and you've already attempted to send PHI, contact us immediately at security@cavaridge.com.
Request a BAA
Questions? Email legal@cavaridge.com.
See also: Terms · Privacy · AI Addendum · BAA Request · Security.