Data Processing & Safeguards Addendum

Between Lakeside Family Dental (Customer) and PacinfraX Corporation (Provider). Covers FTC Safeguards Rule / GLBA, ABA Formal Opinion 477R and ALTA Best Practices, or SEC Rule 204-2 obligations as selected in your profile: encryption in transit and at rest, access controls and MFA, retention (7 years tax, 6 years legal, 5 years RIA), breach notice within 72 hours, US-only storage, subprocessor list, return or destruction on exit. Read the full text →

Business Associate Agreement

Between Lakeside Family Dental (Covered Entity) and PacinfraX Corporation, 19900 MacArthur Boulevard, Suite 915, Irvine, CA 92612 (Business Associate). Effective on acceptance.

1. Definitions

Capitalized terms have the meanings in 45 CFR Parts 160 and 164…

2. Permitted uses and disclosures

Business Associate may use and disclose PHI only as necessary to perform the Services… will not use PHI to train models, for marketing, or for sale.

3. Obligations of Business Associate

Safeguards per Subpart C; breach reporting within 72 hours of discovery; subcontractor flow-down; access, amendment and accounting within 10 business days; US-only storage and content access; annual verification of safeguards…

4. Obligations of Covered Entity

Notify of limitations, changes and restrictions; configure the Services appropriately; maintain MFA and device policies…

5. 42 CFR Part 2

Where applicable, this BAA serves as the qualified service organization agreement…

6. Term and termination

Return or destruction within 30 days; certificate of destruction; legal holds honored…

7. Miscellaneous

Regulatory references, amendment, interpretation, no third-party beneficiaries, survival, notices…

Read the full text →