HIPAA Compliant App hosting

General
,
1

Hi, I’m building a healthcare application entirely on Backendless using Backendless database, Cloud Code/API services, authentication, and web hosting.

I’m considering adding the $399/month Enterprise Security Function Pack to my paid Backendless plan.

Can you please confirm:

  1. Does the Enterprise Security Function Pack include a signed Business Associate Agreement (BAA)?
  2. Does it provide the HIPAA-eligible/private hosting needed to store and process ePHI?
  3. If I add it to my paid Scale plan, do I need any additional Managed Backendless, Dedicated, or other hosting plan for HIPAA use?
  4. Does the BAA/coverage apply to all of the Backendless services my app would use, including:
    • Database
    • Cloud Code / API services
    • Authentication / user sessions
    • File and web hosting
    • Backups / restore
  5. Are there any additional HIPAA-specific settings, configuration steps, or account requirements I would need before putting real PHI into the app?
  6. Are there any extra HIPAA-related fees beyond my normal Backendless plan plus the $399/month Enterprise Security Function Pack?

Thank you.

2

Hello @MedCare_Therapy_Services

Thank you for such detailed and clearly structured questions — they are exactly the right ones to ask for an application that will handle PHI.

Since they involve legal and contractual matters (the BAA, scope of coverage, and infrastructure), we want to make sure our answers are accurate and up to date, so we are currently reviewing them with the responsible team.

We will get back to you with answers shortly. If any of the questions would be better discussed directly, we will also suggest a convenient way to connect.

Regards,
Volodymyr