Which agreements apply?
Confirm the contracting parties, privacy responsibilities and required service, data-processing or business-associate agreements before sharing patient data.
Procurement questions
Ask about the service
you will actually use.
Request specific agreements and evidence for the proposed pilot environment.
Which controls are verified?
Request current security evidence, processing locations, supplier information and access/retention arrangements. This website makes no certification claim.
What should be agreed operationally?
Clarify availability, support, incident communications, review responsibilities and exit requirements in writing.
Keep the next
conversation useful.
Explore the related guidance, then ask about the specific requirements for your clinic or program.
Start with your care team