CH 03 · OPEN · OPTIMAL — DEMO
Healthcare

Acme Health Systems

OCR investigates a peer last quarter and your CISO gets the same questions inbound: how is ePHI protected in transit, what's the audit trail, where's the BAA evidence? This is what your BAA now ships with.

Tenant ID
t-acme-health
Vertical
Healthcare
Contact
security@acme-health.example
Audit window
last 30 days
Privacy mode
zero-persistence (no body content stored)

Available artifacts

html
HIPAA Security Rule
45 CFR § 164.302–318
html
SOC 2 Type II — TSC 2017 (revised 2022)
2022
html
ISO/IEC 27001
2022 (Annex A)
html
Optimal Incident Notification Procedure
1.0
html
Optimal Shared Responsibility Matrix
1.0