Yes. Because we handle systems containing PHI on your behalf, we sign a BAA with your billing firm and honor the BAAs you hold with your DME suppliers. Beyond the paperwork, we implement the access controls, audit logging, encryption, and breach safeguards that make those agreements defensible if a supplier or a Medicare contractor ever asks for proof.