BAA registry
Agreements with the vendors, labs and partners that receive PHI from your mailboxes. PXCMail flags PHI going to a domain without one; a person decides, nothing is sent automatically.
2 domains received PHI this month without an agreement on file. Review below — some may not need one (treatment disclosures between providers, HHS FAQ 240).
| Domain | Type | PHI messages · 30 d | Agreement | Status | |
|---|---|---|---|---|---|
| deltadental.com | Payer | 41 | Payer — covered entity | Not required | |
| oralsurgery.org | Referral provider | 9 | Treatment disclosure | Not required | |
| pacificceramics.com | Lab | 12 | BAA · signed Jan 2026 · exp Jan 2028 | On file | |
| coastal-billing.com | Vendor (billing) | 63 | BAA · signed Jun 2024 · exp Jun 2026 | Expired 4 months | Renew |
| smilecollect.io | Vendor (collections) | 5 | — | Missing | Send BAA |
| otter.ai | Vendor (AI) | 2 (calendar) | — | Missing | Inventory |
| gmail.com / personal | Patients | 118 | Patient’s own address | Not required |
Status is the practice’s determination (Security Officer); PXCMail only proposes. Agreements are stored in the immutable archive with signature hash.
BAA sent to smilecollect.io for signature · PHI to this domain held until signed
Agreement saved to the registry