Assembly Guide | HIPAA Compliance
HIPAA Compliance
Overview
Assembly is committed to ensuring compliance with the Health Insurance Portability and Accountability Act (HIPAA) for users subscribed to our Advanced plan. To facilitate this, we offer a Business Associate Agreement (BAA).
To request a BAA, please ensure you are subscribed to our Advanced plan. Then, email us at support@assembly.com with the legal name you wish to have on the agreement.
Using Assembly’s core apps
We recommend the following app configurations for our Messages App and Contracts App.
In the Messages App settings you can disable message previews in email notifications. Now if you send a client a message from the Assembly Dashboard, the client will still receive an email notification but the email will ask the client to log in to your portal to securely view it and respond.
In the Contracts App settings you can disable file attachments in email notifications. Now email notifications to clients about new contracts to sign and email notifications stating that all parties have signed a contract do not contain the contact PDF as an attachment. Instead the client has to log in to securely view and sign it.
Using Assembly with other products
Assembly makes it possible to embed other products or use automation tools like Zapier and Make for workflow automation. Note that while Assembly itself meets HIPAA compliance standards, third-party tools may not. Please exercise caution when integrating external products with your workspace.