Legal & compliance
Business associate information
This page describes how RaliCare acts as a business associate under HIPAA, at a high level. A signed business associate agreement (BAA) is required before any protected health information is processed.
Our role
RaliCare acts as a business associate to covered entities that use the platform to manage resident care, medication and billing records. We process PHI only for the purposes described in the BAA and applicable service documentation.
What we provide
- HIPAA-oriented technical safeguards and administrative controls
- Role-based access with server-enforced authorisation
- Auditable records of clinical, workforce and financial changes
- Encryption in transit and at rest
- Vendor and subcontractor register available on request
Customer responsibilities
- Workforce training and access reviews
- Appropriate use, policy and procedure
- Reporting suspected incidents in line with organisational policy
- Configuration of retention and deletion within permitted ranges
Honest compliance language
We describe our platform as providing HIPAA-oriented technical safeguards and supporting the customer’s compliance programme. We do not claim that software alone makes an organisation HIPAA compliant.
Contact
Compliance enquiries and BAA requests can be sent to compliance@ralicare.com.