Demonstration environment. Fictional organization, fictional vendors, synthetic data throughout. Changes you make stay in this browser only.
ParvinCorpVendor & BAA Register

Ridgeline Health Partners. Multi-specialty physician group, 6 sites, 14 providers.

Signed in as

Marisol Vance, Compliance Officer. Runs the register. Adds vendors, records BAAs and security evidence, and completes the annual reviews. Sees the audit trail.

VendorsMenu

Vendors

Every outside company the practice pays, with what it touches, its BAA and its risk tier. A vendor serving every site matches any site you pick.
Risk tier
BAA
Patient data
Contract held by
Any entity
Serves
Any site

Regions

Sites in East Region

Sites in West Region

Clear

8 vendors, worst first

Chimeline Patient Messaging

Appointment reminders by text and voice. Patient messaging or reminders, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Every site.

High findingModerate riskBAA: Signed, in force

1 finding: Signed BAA is missing required terms

Copperleaf Voice Notes

Ambient dictation pilot for two clinics. Transcription or dictation, limited patient data. Owner: Dr. Amara Singh.

Ridgeline Medical Group. Serves: Riverside Orthopedics.

High findingModerate riskBAA: Signed, in force

1 finding: Not recorded as live for months: confirm no patient data is being shared

Pinecrest Text Reminders

Appointment reminder texts and two-way scheduling messages. Patient messaging or reminders, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Eastgate Family Care.

High findingModerate riskBAA: Signed, not yet in force

2 findings: BAA needed before any patient data is shared; Annual review overdue or never done

Tallgrass Analytics

Payer mix and denial trend dashboards. Analytics or reporting, limited patient data. Owner: Keisha Okafor.

Ridgeline Management Services. Serves: Every site.

Medium findingModerate riskBAA: Signed, in force

1 finding: Security questionnaire older than 12 months

Evenstar Answering Service

After-hours phone answering and triage messages. Answering service, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Main Campus, Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force
Hollis and Reyes LLP

Outside counsel for malpractice defense. Legal, accounting or consulting, limited patient data. Owner: Marisol Vance.

Ridgeline Management Services. Serves: Every site.

Moderate riskBAA: Signed, in force
Kiteway Check-In

Tablet check-in and intake forms. Patient intake or check-in, limited patient data. Owner: Owen Castellano.

Ridgeline Medical Group. Serves: Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force
Paperwise Secure Shred

On-site shredding of paper records. Document storage or shredding, limited patient data. Owner: Grant Holloway.

Ridgeline Medical Group. Serves: Main Campus, Jefferson Park and Eastgate Family Care.

Moderate riskBAA: Signed, in force