HIPAA laws require that a business associate performs the activities on behalf of the provider, such as transcription, legal consultation, and accounting. Software platform vendors also fall under this category, so it is required by HIPAA laws that these vendors also sign an agreement similar to your office’s legal team to protect health information. Any pushback from a vendor on this is a red flag, so look elsewhere if the software you choose is unwilling to sign a BAA.