Security and compliance
Healthcare accounts
For: Compliance
If you work healthcare accounts, one thing is added: a Business Associate Agreement (BAA). Everything else stays the same.
One Adobe Acrobat Sign signature accepts the Order Form, Standard Terms and Data Processing Addendum, plus the BAA, before any data moves. If documents conflict, the BAA prevails for protected health information.
The data we ask for doesn't change: your own account and agent IDs, call outcomes, payments, and account details such as balance, state, ZIP and an age band. For healthcare accounts, ZIP handling follows counsel's advice. We never ask for consumer names, Social Security numbers, phone numbers, email or street addresses, or bank details. If a file includes any of them, we delete it and ask for a resend.
Your data moves by encrypted SFTP, never by email, and is deleted within 30 days after the engagement ends, with backup copies cleared on the schedule in the Data Processing Addendum. Where it is stored is set out in the Data Processing Addendum.
If any of your book is healthcare, tell us on the call so the BAA is in your signing package.