Under the Health Information Portability and Accountability Act (HIPAA), certain information about a person’s health and/or health care services are classified and protected as Protected Health Information (PHI). Customers wishing to use Smartsheet services with PHI will need to execute Smartsheet’s Business Associate Agreement (BAA).
Once a BAA is executed, you will need to adhere to Smartsheet HIPAA Implementation Guide (the “Guide”) in order to use the Smartsheet services consistent with HIPAA. The Guide provides detailed information on features and security controls that must be adjusted to ensure HIPAA-compliance while using Smartsheet.
Please visit the Smartsheet for Healthcare page for more information.