Settings

· Compliance & BAA

Compliance & BAA

Vendor BAA registry, HIPAA disclosure scripts, audit log access, and per-state referral-fee rules. This page is the HIPAA control surface.

Vendor BAA registry

Every vendor that touches PHI must have a signed BAA on file before the first byte is exchanged.

Vendor	Service	BAA	Effective	Renewal
WellSky	System of record · operational platform	Signed	3/1/2025	3/1/2026
Twilio	Voice + SMS	Signed	6/15/2024	6/15/2026
Vapi	AI Voice	Signed	9/1/2025	9/1/2026
Postmark	Transactional email	Signed	4/12/2025	4/12/2026
Stripe	Payments	Not required	n/a	n/a

New vendors are blocked from production traffic until a BAA row appears here. Owner-only.

HIPAA disclosure script editor

Played at the start of every AI Voice call. Defaults to the agency's primary state, with per-state overrides.

AI Voice disclosure

Arizona · default

This call may be recorded for quality and follow-up. I'm an automated assistant helping intake at Sunrise Home Care. Any health information you share will be kept confidential and used only to coordinate your care inquiry under HIPAA. If you'd prefer to speak with a person, just say "transfer me" at any time.

State overrides

CaliforniaAdds CCPA notice of right-to-delete and explicit recording consent (two-party).

TexasAdds language confirming the caller understands services are non-medical unless skilled is requested.

FloridaReferences Florida nurse registry rules and includes a referral-fee disclosure stub.

Audit log preview

Tamper-evident log of reads and writes. Exportable for 45 CFR §164.528 accounting of disclosures.

User	Action	Record	IP	Timestamp
maria@sunrisehc.com	contact.read	contact:6f3a…	67.182.44.12	11:42:18 AM
maria@sunrisehc.com	contact.update	contact:6f3a…	67.182.44.12	11:42:31 AM
lreyes@sunrisehc.com	recipient.read	recipient:a91c…	67.182.44.18	11:43:02 AM
system:ai-voice	conversation.create	conv:bd72…	54.244.18.7	11:43:55 AM
maria@sunrisehc.com	disclosure.create	disclosure:0e4f…	67.182.44.12	11:45:12 AM
janet@sunrisehc.com	export.audit_log	range:2026-04 → 2026-05	24.121.8.44	11:46:30 AM
system:wellsky-sync	recipient.write	recipient:a91c…	52.39.18.221	11:47:09 AM
david@sunrisehc.com	consent.update	contact:6f3a…	70.114.92.6	11:48:54 AM

Showing 8 of 28,419 events from the last 24 hours. Full log retained for 6 years per HIPAA.

Referral-fee legality reference

Quick-reference for the state rules that matter most to home care agencies. Informational only.

Written disclosure required before any referral. Certain fee arrangements with non-licensed advisors restricted under Health & Safety Code §1771.

Nurse registry rules apply. Referral fees from licensed home health agencies prohibited under Fla. Stat. §400.506.

Licensed home care services agencies face strict fee-sharing limits. Consult counsel before any per-placement arrangement.

Personal assistance services license required. Referral fees permitted with written disclosure to client.

No specific referral-fee statute. General consumer protection and anti-kickback rules apply if Medicaid-funded.

Informational only. Consult your compliance counsel before any per-placement, per-hour-billed, or referral-fee arrangement.