Canonical Framework Canonical Frameworks

HIPAA (Business Associate)

HIPAA compliance for business associates handling PHI on behalf of covered entities. Covers BAA requirements, PHI protection, subcontractor management, breach notification (HITECH Act § 13401), and detailed audit logging. Essential for health-tech vendors and service providers.

Regions

US

Regulations

4 covered

Control Domains

7 domains

Deployment

Clinical Zero-Retention, Private Cloud

Regulations & Standards

HIPAA Privacy Rule (45 CFR 164) HIPAA Security Rule 45 CFR 160/164 HITECH Act § 13401

Control Domains

Phi Protection
Data Processing Agreements
Incident Response
Access Control
Data Encryption
Audit Logging
Subprocessor Management

Deployment Options

Clinical Zero-Retention
Private Cloud

Get started in 3 steps

1

Explore the template

Click "Explore in Console" to open this template in the Keeptrusts configuration editor.

2

Customize policies

Adjust detection thresholds, escalation rules, and redaction patterns to match your requirements.

3

Deploy to your gateway

Save your configuration and deploy it to any Keeptrusts gateway — cloud, on-prem, or air-gapped.