Does drchrono Sign a HIPAA Business Associate Agreement?

By BAA Generator Editorial  ·  Published Apr 20, 2026  ·  Last reviewed Apr 20, 2026  ·  5 min read

drchrono is an iPad-first EHR platform designed for independent, concierge, and ambulatory medical practices. It was one of the first EHRs built natively for Apple devices and has been widely adopted by private practice physicians, urgent care centers, and specialty clinics. Following its acquisition by Global Payments, drchrono now operates within the EverHealth brand alongside other healthcare software products.

drchrono Service Coverage for HIPAA BAA

drchrono and EverHealth: Ownership and BAA Continuity

drchrono was acquired by Global Payments in 2022 and now operates as part of the EverHealth division alongside other practice management and healthcare software brands. Key points about ownership and BAA continuity:

• The drchrono brand remains active for existing and new customers
• The parent entity for contractual purposes, including the HIPAA BAA, is now part of Global Payments / EverHealth
• Existing customers should verify their BAA documentation reflects the current legal entity — request updated BAA documentation from your account manager if you have legacy agreements from before the acquisition
• New customers signing up for drchrono will receive BAA documentation under the current entity structure

How to Get a HIPAA BAA from drchrono

Unlike some SaaS platforms where a BAA requires a special enterprise tier, drchrono includes BAA coverage as a standard part of its service agreement:

• Review your drchrono service agreement — the BAA is typically incorporated or referenced as an addendum
• If you do not have a copy of your executed BAA, contact drchrono support or your EverHealth account manager and request the HIPAA BAA documentation
• New customers should confirm BAA execution during account setup and onboarding
• Keep a copy of the executed BAA in your compliance documentation for audit readiness

For concierge practices or direct primary care (DPC) models using drchrono, the BAA covers the full scope of services in the platform, including any patient portal interactions that transmit PHI.

What Happens If You Use drchrono Without Confirming Your BAA?

While drchrono includes BAA coverage in its standard agreements, some practices — particularly those that set up accounts years ago or through reseller channels — may not have a clearly documented, executed BAA on file. Operating without documented BAA execution is a compliance gap even if the contractual obligation exists in the service agreement.

During an HHS OCR audit or following a breach notification, you will be expected to produce your executed BAA. If you cannot, you may face penalties even if you were technically covered under your service terms. Request and retain your BAA documentation proactively.

For practices evaluating drchrono alongside other EHR options, see our vendor BAA lookup guide for a full overview of which healthcare software vendors sign BAAs. For concierge medical practices, see our guide on HIPAA BAAs for concierge medicine.

Frequently Asked Questions

Does drchrono sign a HIPAA BAA?

Yes — drchrono includes a HIPAA BAA in its standard service agreement for all customers. The BAA covers EHR, billing, patient kiosk, and telehealth services. Contact your account manager to obtain a copy for your compliance records.

Is drchrono HIPAA compliant?

Yes — drchrono is a HIPAA-compliant EHR designed for ambulatory medical practices. It includes BAA coverage, access controls, encrypted data storage, audit logging, and other safeguards required by HIPAA's Security Rule. It is built specifically for healthcare and designed with compliance as a core feature.

Who owns drchrono now?

drchrono was acquired by Global Payments and now operates as part of the EverHealth brand. The platform continues to operate under the drchrono name. HIPAA BAA coverage and obligations are now held by the EverHealth/Global Payments entity. Verify your BAA documentation reflects the current legal entity if you have agreements from before the acquisition.

Does the drchrono BAA cover telehealth?

Yes — drchrono's HIPAA BAA covers its integrated telehealth module as part of the standard service agreement. Video visits conducted through drchrono telehealth are covered. If you use a separate third-party telehealth platform alongside drchrono, that platform requires its own executed BAA.