Last updated: April 22, 2026
A Business Associate Agreement (BAA) is a legally binding contract required by HIPAA between a covered entity (you, the clinician) and a business associate (us, Speechtherapist.app) that handles Protected Health Information (PHI) on your behalf. The BAA establishes the permitted uses and disclosures of PHI and requires the business associate to implement appropriate safeguards.
Speechtherapist.app is built to be HIPAA-compliant for all users. However, we execute formal Business Associate Agreements (BAAs) with school districts, larger clinics, and enterprise organizations that require one as part of their compliance program.
Individual practitioners benefit from our HIPAA-compliant infrastructure — including encryption, access controls, and audit logging — without needing a separate BAA. Our BAA covers:
If your school district, clinic, or organization requires a BAA, please contact us at compliance@speechtherapist.app. We accommodate BAAs for school districts, multi-provider practices, clinics, and hospital systems.
We maintain BAAs with all sub-processors that may access PHI:
| Provider | Purpose | BAA Status |
|---|---|---|
| Google Cloud (Firebase) | Database, authentication, file storage, real-time data | Active |
| Anthropic | AI note generation, reports, clinical chat | Active |
| Deepgram | Speech-to-text transcription | Pending |
| Vercel | Application hosting | Active |
| Stripe | Payment processing (no PHI access) | N/A |
When you use Speechtherapist.app, PHI flows through these systems:
For BAA requests or compliance questions: compliance@speechtherapist.app