Agreements

Settings → Agreements holds your organization's agreements with us. Only an organization admin can accept or sign them.

Data processing agreement (DPA)

An organization admin accepts the DPA on the organization's behalf before any governance records can be created or changed. Setup (your profile, members, sign-in and integration settings) can be done first. When the DPA changes, admins are asked to accept the new version; nothing is locked meanwhile.

Business associate agreement (BAA)

If your organization answered that it is a covered entity or a business associate, a BAA is needed before you record answers or records that may hold protected health information. Setting up, registering systems and creating an assessment stay open before it.

• Sign the standard agreement yourself, or send it to the person who signs for your organization; they confirm with a code sent to their email.
• Upload your own agreement instead; it takes effect once we countersign it.

The signed agreement can be viewed and downloaded from this page at any time.