Account, team, and security
Legal and compliance
Find the Terms, Privacy Policy, and Business Associate Agreement, review audit logs, use the compliance library, and know how to file a HIPAA complaint.
Legal
Settings > Legal lists the documents you accepted (Terms of Service, Privacy Policy, Business Associate Agreement, digital-signature agreement) with the version and the date you accepted, plus contact information and how to file a HIPAA complaint. The public copies are in the legal center.
Compliance
Settings > Compliance:
- Audit Logs: access history and security events for the practice (who viewed, exported, or changed what, sign-ins and failures, administrative actions).
- Compliance library: policies, checklists, and templates (risk analysis, workforce training log, incident response, sanctions policy) you can adopt.
- Business Associate Agreement: the BAA text and Sefton’s compliance documentation.
Reports
The HIPAA Audit Report under Exports produces the period’s logs as a PDF or spreadsheet for your records or an auditor (Exports and reports).
Our side
What Sefton does as your business associate (encryption at rest and in transit, PHI-aware audit logging, role-based access, HIPAA-eligible cloud hosting, sub-processors) is on Security and HIPAA.
Frequently asked questions
Who is the covered entity and who is the business associate?
Your practice is the covered entity. Sefton Health, Inc. is your business associate under the BAA you signed at onboarding.