HIPAA and BAA status

Altehra is pre-alpha and is not currently approved to receive protected health information. Product access alone does not authorize PHI use.

Before production use, the customer and Altehra must execute the applicable business associate agreement and services agreement. Altehra must also document executed agreements and HIPAA-ready account settings for every subprocessor that will handle PHI.

Design partners should use synthetic data until the signed agreements, security review, vendor configuration, backup test, access review, and go-live approval are complete.