Business Associate Agreement

1. Parties and Scope

This Business Associate Agreement (“BAA”) supplements the Voycee Terms of Service between Voycee Inc. (“Business Associate”) and the Covered Entity (“Tenant”). It governs PHI created, received, maintained, or transmitted by the Business Associate on behalf of the Covered Entity under 45 CFR Parts 160 and 164.

2. Authority

By accepting, the signing user certifies they have authority to bind the Covered Entity. Acceptance is recorded with the user identifier, organization, timestamp, IP address, and the full text version that was agreed to.

3. Permitted Uses and Disclosures

Voycee will:

• Use and disclose PHI only as permitted herein.
• Implement administrative, physical, and technical safeguards under 45 CFR §164.308-312.
• Report Security Incidents and Breaches under §164.410.
• Ensure subcontractors agree to equivalent restrictions.
• Make PHI available for access, amendment, and accounting requests as required.
• On termination, return or destroy PHI to the extent feasible.

4. Subprocessors

The complete list of Voycee subprocessors that may process PHI is at /legal/subprocessors. Each subprocessor is bound by equivalent confidentiality and safeguard terms.

5. Permitted-Use Scope

Voice call answering, transcription, scheduling, and notification delivery. PHI retention defaults to 30 days unless extended by the Tenant in writing.

6. Recording Defaults

Until this BAA is accepted, call recording is force-disabled for the tenant. Once accepted, recording follows the tenant’s configured preference. Recording disclosure is announced at the start of every call as a runtime requirement.

7. Term

This BAA becomes effective upon acceptance and continues until the underlying Service Agreement terminates.