Yes. Because we manage systems that store and transmit protected health information, we sign a Business Associate Agreement with every scanning client before touching your environment. The BAA documents our HIPAA obligations for safeguarding PHI, breach notification, and permitted uses of data. This lets you extend a compliant, documented chain of custody down to your IT provider. We treat the BAA as the foundation of the relationship, not an afterthought.