HIPAA Notice
Last updated May 15, 2026. Vital Assist supports clinics in handling Protected Health Information (PHI) under the U.S. Health Insurance Portability and Accountability Act (HIPAA) and the HITECH Act.
This notice describes our general HIPAA posture. Your individual obligations are governed by the Business Associate Agreement (BAA) executed with your practice.
Our role under HIPAA
When we handle PHI on behalf of a covered entity (your practice), Vital Assist acts as a Business Associate under HIPAA. We are directly liable for compliance with applicable HIPAA Privacy and Security Rule requirements.
Minimum necessary
Our assistants access only the minimum PHI necessary to perform the tasks assigned by your practice. Access is provisioned through your systems under your control and revoked promptly at the end of an engagement.
Workforce
All assistants and supervisors complete HIPAA training before placement and receive refresher training at least annually. Background checks and confidentiality agreements are conditions of engagement.