Last Updated: 23 September, 2026

Business Associate Agreement (BAA)

Supporting Healthcare Privacy & Compliance

Softhealer Technologies Pvt. Ltd. ("Softhealer", "we", "our", or "us") develops and operates Monitor360, an enterprise workforce monitoring and productivity platform.

We understand the importance of protecting Protected Health Information (PHI) and supporting healthcare organisations in meeting their obligations under the Health Insurance Portability and Accountability Act (HIPAA).

For eligible healthcare customers, Softhealer Technologies Pvt. Ltd. provides a Business Associate Agreement (BAA) that outlines our responsibilities regarding the protection and handling of Protected Health Information (PHI) processed through Monitor360.

This page provides an overview of our Business Associate Agreement and how it supports healthcare organisations using Monitor360.

1. What is a Business Associate Agreement?

A Business Associate Agreement (BAA) is a legal agreement between a Covered Entity (or another Business Associate) and a Business Associate that defines how Protected Health Information (PHI) is used, protected and managed.

It establishes the responsibilities of both parties and helps ensure that PHI is handled in accordance with applicable HIPAA requirements.

2. Who Needs a BAA?

A BAA is commonly required when a healthcare organisation uses a third-party service provider that may create, receive, maintain or transmit Protected Health Information (PHI) on its behalf.

Many healthcare organisations request a BAA as part of their:

• Vendor onboarding
• Procurement process
• HIPAA compliance programme
• Information security review
• Third-party risk assessment

3. Our Commitment

Softhealer Technologies Pvt. Ltd. is committed to implementing appropriate administrative, physical and technical safeguards to help protect Protected Health Information (PHI).

Our Business Associate Agreement reflects our commitment to:

• Protecting Protected Health Information (PHI)
• Supporting HIPAA privacy and security requirements
• Maintaining appropriate security measures
• Preserving confidentiality
• Supporting healthcare customers with applicable compliance obligations
• Promptly addressing security incidents in accordance with applicable legal and contractual requirements

4. What Does Our BAA Cover?

Our Business Associate Agreement provides a framework for how Protected Health Information (PHI) is managed and includes commitments relating to:

• Protection and appropriate use of PHI
• Privacy and confidentiality
• Administrative, physical and technical safeguards
• Security incident and breach notification
• Use of subcontractors, where applicable
• Data retention and secure disposal
• Compliance responsibilities
• Termination obligations

For more information about our privacy and security practices, please refer to our Security, Privacy Policy and HIPAA pages.

5. Security & Privacy

Protecting sensitive information is a core part of the Monitor360 platform.

We implement technical and organisational measures to safeguard customer information throughout its lifecycle, including TLS 1.2 encryption in transit, AES-256 encryption at rest, multi-factor authentication (MFA), role-based access controls and audit logging. Our security programme is independently audited through our ISO/IEC 27001:2022 and SOC 2 Type II certifications.

Detailed information about our security controls is available on our Security page.

6. Request a BAA

A Business Associate Agreement is available for eligible healthcare customers using Monitor360.

If your organisation requires a BAA, our team will be happy to assist during:

• Product evaluation
• Procurement and vendor onboarding
• Customer implementation
• Any stage of your active subscription

7. Contact Us

If you have questions about our Business Associate Agreement or would like to request a copy, please Contact Us using the contact information available on our website.