Business Associate Agreement (Click-through)

This click-through Business Associate Agreement ("BAA") governs EveryCase.ai's handling of Protected Health Information ("PHI") when you upload records through the secure portal.

Final counsel-approved BAA text must replace this operational summary before PHI upload is enabled. Until then, uploads remain disabled by feature flag.

• EveryCase acts as a business associate only for covered PHI you submit for the requested services.
• PHI is used solely to provide evaluation/case services and related security/support.
• Appropriate safeguards, access controls, and audit logging apply.
• Subprocessors are bound by written agreements as required.
• Breach notification follows applicable law and documented incident response.
• Upon termination or retention expiry, PHI is returned or destroyed as specified in Document Handling, except as required by law.

Acceptance is versioned, timestamped, and stored against your lead record before any upload URL is issued.

Change log

• August 10, 2026 — Version bumped to v2026-08-10; published effective date and change log for funnel version tracking.