A Business Associate Agreement (BAA) is a required HIPAA contract between a treatment center and any vendor that handles protected health information. Without a signed BAA, your center is exposed to significant compliance liability. Blueshirt Media executes a BAA before any patient data is handled.

All voice and text data is encrypted in transit and at rest using industry-standard protocols. Access is restricted to authorized personnel only. Every interaction is logged and auditable.

Yes, when built on HIPAA-compliant infrastructure. Blueshirt Media operates under a signed BAA, encrypted data transmission, role-based access controls, and full audit logging — meeting HIPAA requirements for addiction treatment centers.

Call data is encrypted and stored securely. Blueshirt Media retains only the minimum data necessary to deliver services, consistent with HIPAA's minimum necessary standard. Data is never sold or shared outside your secure environment.

Blueshirt Media's platform is designed with substance use disorder confidentiality requirements in mind. Contact us to discuss your program's specific 42 CFR Part 2 obligations before onboarding.

Most treatment centers are live within one week of BAA execution. Blueshirt Media handles configuration, integration, and compliance setup before the first call is answered.