HIPAA & BAA

This page explains how HIPAA applies to your use of the YM Design Portal and how to put a Business Associate Agreement (BAA) in place if your practice needs one.

Note. No software is "HIPAA-certified" — there is no such government program for either software vendors or dental labs. HIPAA is a framework of obligations on the practice (Covered Entity) and on vendors that handle Protected Health Information on the practice's behalf (Business Associates). YM does not represent the Service as "HIPAA-certified" or "HIPAA-compliant."

Our role

When a case you submit contains identifying patient information, YM may act as a Business Associate of your practice. A separate signed Business Associate Agreement governs that relationship. The BAA — not this page — is the binding document.

Reasonable safeguards

Independent of any agreement, we maintain reasonable administrative, technical, and physical safeguards consistent with industry practice for a small CAD design service. Specific control details, audit results, subprocessor relationships, and incident-response procedures are shared under a signed BAA, not published here.

Minimize what you send

The single biggest practical safeguard is on your side: send the minimum patient information necessary to design the case. Where it works for your records, prefer chart numbers or initials over full patient names. The portal does not require full identifiers to function.

Requesting a BAA

If your practice requires a signed BAA, email info@ymdental.com from the address registered to your account. We'll reply with our standard BAA. Edits and redlines are accepted on a case-by-case basis.

Patient rights

HIPAA gives patients the right to access and amend their PHI. Patient requests should go to your practice as the Covered Entity. Where reasonable assistance is needed from us as Business Associate, we coordinate through your account.

Questions

Email info@ymdental.com. Privacy of your account information generally is covered separately in our Privacy Notice.