Business Associate Agreement

Last Updated: January 02, 2026

1. Introduction

This Business Associate Agreement ("BAA") is entered into between you ("Covered Entity") and Neurova ("Business Associate"). This agreement is required by the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") and its implementing regulations.

2. Definitions

Terms used, but not otherwise defined, in this Agreement shall have the same meaning as those terms in the HIPAA Rules.

  • Business Associate: Neurova.
  • Covered Entity: You, the healthcare provider or organization.
  • Protected Health Information (PHI): Individually identifiable health information created, received, maintained, or transmitted by Business Associate on behalf of Covered Entity.

3. Obligations of Business Associate

Neurova agrees to:

  • Not use or disclose PHI other than as permitted or required by the Agreement or as required by law.
  • Use appropriate safeguards to prevent use or disclosure of PHI other than as provided for by this Agreement.
  • Report to Covered Entity any use or disclosure of PHI not provided for by this Agreement of which it becomes aware, including breaches of unsecured PHI.
  • Ensure that any subcontractors that create, receive, maintain, or transmit PHI on behalf of the Business Associate agree to the same restrictions and conditions.

4. Permitted Uses and Disclosures

Neurova may use or disclose PHI as necessary to perform the services set forth in the Service Agreement (Terms of Service), provided that such use or disclosure would not violate HIPAA if done by the Covered Entity.

5. Term and Termination

This Agreement shall terminate when all PHI provided by Covered Entity to Business Associate is destroyed or returned to Covered Entity, or, if it is infeasible to return or destroy PHI, protections are extended to such information.

6. Acceptance

By using the Neurova platform and agreeing to our Terms of Service, you acknowledge and agree to the terms of this Business Associate Agreement.