PathwayNotes Business Associate Agreement (BAA): Who Needs One

The Business Associate Agreement (BAA)

A Business Associate Agreement, or BAA, is a HIPAA-related agreement between a covered entity and a service provider that may create, receive, maintain, or transmit protected health information on the covered entity’s behalf.

The PathwayNotes BAA identifies Minds Awakened, LLC, operator of PathwayNotes, as the Business Associate, and the accepting provider or organization as the Covered Entity. It becomes effective when accepted through the PathwayNotes application.

The BAA covers permitted uses and disclosures of PHI, Business Associate obligations, Covered Entity obligations, safeguards, breach and security incident reporting, subcontractors, access, amendment, accounting of disclosures, termination, data handling, export, and AI and machine-learning provisions.

If your practice uses PathwayNotes with real clients and PHI, review the full BAA before going live. If you are unsure whether your practice requires a BAA, consult your compliance advisor, legal counsel, or malpractice carrier.

    • Related Articles

    • HIPAA Compliance Overview

      PathwayNotes is designed for clinical use where protected health information may be involved. When a covered entity uses PathwayNotes with PHI, HIPAA-related responsibilities are addressed through the PathwayNotes Business Associate Agreement. HIPAA ...
    • How Content Awareness Flags Work

      WEB APP ONLY Content Awareness Flags are a clinician web dashboard feature only. They do not appear in the iPhone app for clinicians or clients. Content awareness runs silently on every journal entry and message submitted. The AI scans for language ...
    • Data Handling, Storage, and Protection

      PathwayNotes handles account information, login information, journal entries, mood selections, messages, assessment information, client profile information, AI-generated summaries or insights, and protected health information when used by a covered ...
    • What Clinicians Can See — and What Stays Private for Clients

      What clinicians can see All journal entries the client has shared (Shared with counselor toggle is on), mood selections, weekly and monthly summaries, all messages exchanged between the client and the AI, all direct messages to the clinician, ...