Demonstration environment. Fictional organization, fictional vendors, synthetic data throughout. Changes you make stay in this browser only.

ParvinCorpVendor & BAA Register

Ridgeline Health Partners. Multi-specialty physician group, 6 sites, 14 providers.

Signed in as

Marisol Vance, Compliance Officer. Runs the register. Adds vendors, records BAAs and security evidence, and completes the annual reviews. Sees the audit trail.

ReviewsMenu

DashboardCoverage and risk FindingsGaps to close ReviewsAnnual review cycle ReportPrint for partners or auditors VendorsThe register Add a vendorIntake and BAA check CalendarDue in the next 90 days OrganizationEntities, regions and sites Audit trailWho changed what Guided tourWhat this does

Appearance

Reviews / Ironbark IT Services, Sep 16, 2026

Annual review of Ironbark IT Services

Reviewed on Sep 16, 2026. Reviews are never edited after they are recorded; a correction is a new review.

Reviewed: Sep 16, 2026
Reviewer: Marisol Vance
Outcome: Escalated
Next review: Oct 16, 2026
Tier at review: High risk
Vendor: Ironbark IT Services

Notes

Working with administrator access and no signed BAA. Theo to get their legal team to sign this month, or remove their access.

Checklist

1. Patient data access and data types are still accurateYes
2. A signed, current BAA is on file with the required termsNo
3. Security evidence is currentYes
4. Subcontractors that handle our data are listed and bound by the same termsNot applicable
5. No security incidents or breach reports since the last reviewYes
6. A named internal owner is still responsible for this vendorYes