We’re launching a HIPAA-covered application and need a signed BAA. Please confirm in writing that the BAA scope covers both our Fly Machines and the Fly Managed Postgres cluster, since protected health information is stored in the database.
Hi there, a Business Associate Agreement (BAA) is a mandatory legal contract under HIPAA between a healthcare covered entity and a vendor or third-party service provider. Therefore, the agreement is between you and Fly.io, and covers all services provided to you by Fly.io directly, Managed Postgres included.
Let me know if this helps!