Business Associate Agreement (BAA)
Mythos Compliance & Security Framework
We sign a Business Associate Agreement with every practice before we see any patient data. Email raza.afzal@mythosmd.com and we'll send our standard BAA for review.
Use of patient dataOnly for billing services engaged; never sold or used to train third-party AI models.
Where data livesPatient data stays in US-hosted systems: your EHR, clearinghouse, and our US-region workspace.
Breach noticeNotifying you of a breach of unsecured patient data without unreasonable delay and within 30 days.