Permitted uses & disclosures of PHI
Consential's own marketing site and widget are designed to avoid handling PHI directly — this section will define the boundary precisely.
Safeguards
Administrative, physical, and technical safeguards required under HIPAA.
Reporting of security incidents
Notification timeline and process if something goes wrong.
Subcontractor flow-down
How AWS and any other subprocessors are bound to equivalent terms.
Term & termination
Conditions under which this agreement ends.
Return or destruction of PHI at end of relationship
What happens to a practice's audit data if they leave.