There is a wide range of third-party service providers with whom dental practices might share PHI - for example, a software developer, a cloud-based data storage service (i.e., AWS, Azure, Google Cloud Services, etc.), an accreditation service, an accountant, or a lawyer. Before PHI is shared with any third-party service provider, the dental practice must conduct due diligence to ensure any PHI shared with the service provider will be used, disclosed, and secured in compliance with HIPAA, and have a Business Associate Agreement in place detailing how PHI shared with the service provider can be used.