Skip to main content
Question

HIPAA/HITECH/Hitrust compliance

  • November 20, 2017
  • 2 replies
  • 35 views

Forum|alt.badge.img+1

Hi all,

Just wondering if anyone has gotten a signed BAA out of JAMF yet. I have been shot down by logmein and quest's legal teams. Haven't tried to get hold of a JAMF attorney yet to see what the result will be. Sales and Legal are usually at opposite ends here.

2 replies

donmontalvo
Forum|alt.badge.img+36
  • Hall of Fame
  • November 20, 2017

Jamf Pro is a management tool. It doesn't process any electronic personal health information. Would give Jamf a call.


Forum|alt.badge.img+16
  • Valued Contributor
  • November 20, 2017

A BAA is typically only required when the 3rd party needs to use, access, or store PHI (ex. a BAA with Box.com, where PHI is being stored via Box accounts). Jamf Pro doesn't use or store any PHI.

Given that a BAA details how the 3rd party will use and secure PHI I'm not sure what a BAA would look like with a vendor that isn't storing or accessing PHI.