Demonstration environment. Fictional organization, fictional vendors, synthetic data throughout. Changes you make stay in this browser only.
ParvinCorpVendor & BAA Register

Ridgeline Health Partners. Multi-specialty physician group, 6 sites, 14 providers.

Signed in as

Marisol Vance, Compliance Officer. Runs the register. Adds vendors, records BAAs and security evidence, and completes the annual reviews. Sees the audit trail.

VendorsMenu

Vendors

Every outside company the practice pays, with what it touches, its BAA and its risk tier. A vendor serving every site matches any site you pick.
Risk tier
BAA
Patient data
Contract held by
Ridgeline Medical Group
Serves
Any site

Regions

Sites in East Region

Sites in West Region

Clear

14 vendors, worst first

Greyhawk Imaging Reads

Overnight radiology reads. Teleradiology or remote reads, full patient records. No owner.

Ridgeline Medical Group. Serves: Riverside Orthopedics.

Critical findingHigh riskBAA: Signed, in force

2 findings: Days held without a BAA were covered by a BAA entered later, not yet confirmed; No internal owner

Quillstone Transcription

Dictation transcription for clinic notes. Transcription or dictation, full patient records. Owner: Dr. Amara Singh.

Ridgeline Medical Group. Serves: Stonebridge and Riverside Orthopedics.

Critical findingHigh riskBAA: Expired

1 finding: BAA has expired but the vendor is still active

Chimeline Patient Messaging

Appointment reminders by text and voice. Patient messaging or reminders, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Every site.

High findingModerate riskBAA: Signed, in force

1 finding: Signed BAA is missing required terms

Copperleaf Voice Notes

Ambient dictation pilot for two clinics. Transcription or dictation, limited patient data. Owner: Dr. Amara Singh.

Ridgeline Medical Group. Serves: Riverside Orthopedics.

High findingModerate riskBAA: Signed, in force

1 finding: Not recorded as live for months: confirm no patient data is being shared

Pinecrest Text Reminders

Appointment reminder texts and two-way scheduling messages. Patient messaging or reminders, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Eastgate Family Care.

High findingModerate riskBAA: Signed, not yet in force

2 findings: BAA needed before any patient data is shared; Annual review overdue or never done

Bluefern Telehealth

Video visits and virtual waiting room. Telehealth platform, full patient records. Owner: Dr. Amara Singh.

Ridgeline Medical Group. Serves: Every site.

High riskBAA: Signed, in force
Cobalt Lab Link

Interface between our EHR and the reference lab. Lab or device interface, full patient records. Owner: Dr. Amara Singh.

Ridgeline Medical Group. Serves: Main Campus and Stonebridge.

High riskBAA: Signed, in force
Larkspur Clinical Cloud

Hosted EHR and practice management system. EHR or clinical platform, full patient records. Owner: Theo Brandt.

Ridgeline Medical Group. Serves: Every site.

High riskBAA: Signed, in force
Evenstar Answering Service

After-hours phone answering and triage messages. Answering service, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Main Campus, Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force
Kiteway Check-In

Tablet check-in and intake forms. Patient intake or check-in, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force
Paperwise Secure Shred

On-site shredding of paper records. Document storage or shredding, limited patient data. Owner: Grant Holloway.

Ridgeline Medical Group. Serves: Main Campus, Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force
Clearview Facility Services

Nightly cleaning at all clinic locations. Facilities, supplies or staffing, no patient data. Owner: Grant Holloway.

Ridgeline Medical Group. Serves: Stonebridge, Riverbend and Riverside Orthopedics.

Low riskBAA: Not required
Pinecrest Office Supply

Office and exam room supplies. Facilities, supplies or staffing, no patient data. Owner: Grant Holloway.

Ridgeline Medical Group. Serves: Every site.

Low riskBAA: Not required
Tillway Payments

Card payments at the front desk and online. Payment processing, no patient data. Owner: Keisha Okafor.

Ridgeline Medical Group. Serves: Every site.

Low riskBAA: Not required