HIPAA/HITECH/Hitrust compliance

[petefahlenkamp]

Hi all,

Just wondering if anyone has gotten a signed BAA out of JAMF yet. I have been shot down by logmein and quest's legal teams. Haven't tried to get hold of a JAMF attorney yet to see what the result will be. Sales and Legal are usually at opposite ends here.

[donmontalvo]

Jamf Pro is a management tool. It doesn't process any electronic personal health information. Would give Jamf a call.

[Kaltsas]

A BAA is typically only required when the 3rd party needs to use, access, or store PHI (ex. a BAA with Box.com, where PHI is being stored via Box accounts). Jamf Pro doesn't use or store any PHI.

Given that a BAA details how the 3rd party will use and secure PHI I'm not sure what a BAA would look like with a vendor that isn't storing or accessing PHI.