Compliance
Business Associate Agreement (BAA)
For healthcare customers, Akalon signs a BAA before go-live. We are HIPAA-ready — not a substitute for your own compliance program.
Before go-live
A signed BAA is required before we process PHI in production. Sales and onboarding will route the agreement with your commercial paperwork.
Controls we emphasize
- Human-in-the-loop for money-moving and high-risk steps
- Audit logs and role-based access
- Retention posture discussed during security review
- SOC 2–aligned controls; report available on request (not “certified” unless cleared)
Marketing site boundary
Do not send patient PHI through demo forms, email to the marketing inbox for testing, or public pages. Use synthetic data only in demos.