HomeMy WebLinkAbout2017-123-E Health - Solutionreach, Inc. for HIPAA compliance texting DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
SERVICES AGREEMENT
This Services Agreement("Agreement")is entered into on March 8,2017 ("Effective Date")by and between Solutionreach,Inc.,d.b.a.Solutionreach or Smile Reminder(the"Company"),with
its principal place of business at 2912 Executive Parkway Suite 300 Lehi,UT 84043,and"Client,"with its principal place of business listed below. Please fax this signed Agreement to the Company
at(801)407-1629.
Client Account Information
Business Name Orange County Health Department
Address 300 West Tryon Street
City Hillsborough I State NC Zip 27278
Country United States
Contact Information
Name Rebecca Crawford
Direct Email rcrawford@orangecountync.gov Direct Line/Ext 919-245-2414
Office Email Office Phone
Office Contact Practice Fax
Web Site Address
Practice Software Eaglesoft/Dental,Patagonia/Medical Version
1.Services: The Company agrees to provide Client non-exclusive electronic access to the Smile Reminder Platform or Solutionreach Platform(Services")via a digital information processing,transmission and
storage system("Servers")maintained by the Company and located at the Company's facilities.The Company shall make the Services and Servers available on and via the Internet.
2.Fees and Payment: Client agrees to pay a monthly license fee in accordance with the attached schedule I(based on the License Terms specified below).The monthly billing cycle commences 10 days after the
Effective Date.Pricing is guaranteed for as long as this Agreement remains in effect and if Client begins using the Services within 15 days subsequent to the Effective Date.All fees are in U.S.Dollars.
3.Multi-Annual Term:Monthly Service Fee is based on(i)multi-annual agreement(24 months)(ii)per license,(iii)services,(iv)up to 3 providers per license.
4.Payment: A Setup Fee of$1 will be assessed upon execution of agreement.Client will be charged the monthly Service Fee at the end of each monthly billing cycle.(See schedule I for pricing).
5.Satisfaction Guarantee: The satisfaction guarantee period begins 10 days after the Effective Date above and continues for 60 days. Client may terminate this Agreement if Client has completed initial training,
completed installation of the Solutionreach or Smile Reminder data sync software program and the Services have been actively in use(e.g.,sending messages)for at least 30 days,provided(1)Client has not
waived the satisfaction period,and(2)Client notifies the Company in writing of its intent to cancel within the applicable satisfaction guarantee period.
6.Other:This Agreement includes and incorporates all terms and conditions of the Company's online End-user License Agreement(including changes and updates from time to time),which must be accepted by
Client.In the event of a practice transfer,both the Client and the new practice owner are liable for all obligations under this Agreement,unless specifically agreed in a signed writing by the Company.Client shall
pay all collection and attorney fees if collection procedures are commenced.By signing this Agreement,Client is authorizing the Company to directly charge the credit card or bank account,as indicated below,
for all applicable fees described herein.
Credit Card: (check one) Charge Checking or Savings Account: (check one)
AMEX Visa MasterCard Discover Checking Savings
Name of Institution:
Expiration Date: / Routing Number:
Name on card: Information will be given over the phone. Account Number:
Address(if different than above): Name on Account:
This Servi es j-ement shall automatically renew 24 months after the Effective Date(the"Renewal Date")for an additional one year term and annually thereafter on each anniversary
of the Re•,-w. !late,unless the Company is notified in writing at least 15 days prior to the next Renewal Date.
Initial here to indicate that you understand and acknowledge the automatic renewal terms of this Agreement.
IN WITNESS WHEREOF,the Client,by its duly authorized representative,has executed this Agreement as of the Effective Date.
DocuSigned by: DocuSigned by:
Fjorkil 1T( uth e� d representative): agP��R� OVED)�`(SOL Tlu ONREACH AUTHORIZED REPRESENTATIVE:
AA-2G 4o�l PR=D
i (J.en gn
d
§1-45A�6B945G40F... Hann D0168.4ZF r12..
Office Use 0inlly° iUpdalr I/2015
Source lloduclry
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
Schedule I
Solutionreach LICENSING—Includes Solutionreach Platform
IMPLEMENTATION/SET UP
One time Implementation/Set up Fee: 3 licenses- $1 (regularly$399 per license) $1
MONTHLY LICENSING
SR Licenses–(3) three x$379/ea. per month/per license $379/mo. per license
Limelight– 1 x$80 per month(Includes initial 4 FREE months and 120 day satisfaction guarantee $80/mo.
period)
Healthgrades Premium Profiles–2 x$159 per month(Includes initial 4 FREE months and 120 $159/mo. per license
day satisfaction guarantee period)
List of 3 Locations
Healthgrades Providers:
Orange County Health Department-Dental Clinic
300 West Tryon Street -Dr.Michael Day,DDS
Hillsborough,North Carolina 27278 -Dr.Stephanie George,DDS
(919)245-2435
Orange County Health Department-Chapel Hill Medical Clinic
Center2501 Homestead Road
Chapel Hill,North Carolina 27516
(919)245-2400
Orange County Health Department-Hillsborough Medical Clinic
300 West Tryon Street
Hillsborough,North Carolina 27278
(919)245-2400
DocuSign Envelope ID:98C1EFCE-16F1-463F-82E1-11E2C75006F5
End-ui.,or Agroomr,,n.k '.'iolt)..II.onroch and'`''',.,17111c Romind(n
PI r,.; .11.1r;following I icon,,,,c,agrounr,,n.t.Yc,u cxept thc ngroornoM ()ur sy storm ond
ft' t,isor Liconsc.,Agroonvint. Id:. rd,,J,,,c1 woin,nt Ir.n,.)1 annul' vo() c,,H.,o111(1 GUI YQ,1'51101 IC l',%)('1 1`.,..,,f)10C11(11i".811 ac:c Y;.,1 If!';''.;i.a I'd
• ,,,q.c,-,11o1.111c 7,1'4 14 I()1' YID 1111..‘,1111',1■'"; Hclokr,,c,11o1 :1,11'atI101 oflcr 1,,r ir tc. „,r)you
uH,fr,1 thi,, 'ot 11.,;)11 .D1 ot.1 n,11(1 G,11 '‘,011,1i,,r11..,;a(;1 In; tinIns; collioyt logt.iir.,oil lc ot.1
cl lc'7,,C,P1 c,11111k, v(;),.' c‘i or dci. wic ur.d.w.,1c'KJ,111.,Agy,on-,.nt ac,r,c,to ho hot IA t'e lc 116 1 ,;floci a".;o'd,latc "low,1111c, If you
Hct 111101(1m,,of 1111,,',,g1,,on,,nt '1,1t V 01 111C1('1 ■I Op,11,11,11C'01 1111.a
t icotion S(11''VIGO.S.11'(.011.1d,'1")1.1011 grir rcu litec! lon.o/G4J-..1.,o \o(:)1)1..",'Iqht ow,II;,nso f ihr;iern k,c,,,ir,c'nc
2.Avnilobility of Sorvicos.';',1)1c,c1 lo.118'rely',n'id 1 111"... t),..,c coin nc doll,'101,,,011,,l)!,, tc, oyido I() locs lot,' '.01in thi,
Aq'r,o1 lc,1.You II PI`mil- tc,tin-0.110 rno, ;IP fci Ht.clim poi m;',1-1,11311co piccoKl,ir,,,or up,,,,,m(..,y.„ r-ollui 1c0,', DI lc: 1)c,voi cm col c' Hot
orninunicAlrxi or lipl(s l'o I;col ic.,,,qt1(,11 oho'failure,.
'10 C hangc-Vou cl tr, o flf, t 'olv y211:,,J, pro',1();.1, pro.,irl,A t orlrd o`fc,1 our
4",;11(.ollnik,r1 ;!,1)1 f 4)1 fv,r1\our n prJ.,,.1cr th(, o ,x,.11 old 1•11.,,,`kgrc.:,rne,'It or II
,Jf.1111C.0 1)01;,,1,,
Opo.nilion and '/1111 rcP,sor nol(;(;f1c),t,lo r,u1 nr.d'o r,o'Cicl.;:nti;116.,,ne, nt, da; Vldf.0 infc,HTH h,„
ctiHen-,,,r, ,)( tO ycui oro,nri/Mion lic,tip,hr>1 '1'n11 10‘.,01(,,,friqL ;',11(',oft ;no,not xi')rchi',/r,
Dat..,A r.ves,/,.1"(A, war mor', to 111(, e,:1(.1,,d for n to,P,rnon,',.,thr;1 II 1,g, cnIn ap;.,;)11101(,r <,o'I'llrykion,,to 1,1,1
lo'\.otir,,,,11 your o:;r 'dnd your,)11111W,s 11; a(.1.111 f010','(,1 dISCIMI(j., Or IlD111 1.1'0111r DCA
01' 1)'(,,,C.'10,,of n'iy (51,)rr„, bl'14' 11,alld 011 C.011,11'11101'1(/'dal;) 1111tw„., p,:;w,111o,
,,ir.(11011 lc; 1.1 if yr,F,11;'3,8 prc,r,arif;r,()I;fr,fc,nclirK, `or,,r,piroj or whic,l, 1111;31'' (,121mod If,.in.'ai
11,;1"11, 01 unkrir,,,,,- (,r dnliquichtLy, II !)!,SI,n,10■"t,I rr.J.,,tr.I(),,11.'1(,r ndir, Drh Io 1,11'1g if f)111'1f;
6. 1.Alpn ranty and Linbilityi irr11.,1()L,,,. 1111 \,'IC;1 PI,;1')`/I /,A /NI)Y01,11;(1';',1 01 1111 \ 1'01,M C)'./V1‘,1 P1(,,.K. 1',"I I I rc)1.11.111-1;(1p, y
1,;AI)I '1;A,I.111;1 )1)1\1() I 1111,1 1111 VII I ',I J.1,111,,I 1,1,.111'I I I) -,;1,;01,,.1 I,;1 I 01,,Gc,1,/,'I III (111,',1 ■()1\1()1 I'A,KI C;ARDII\In, I I 1- ()I,; 1111 1;1 ()I
I II 1)1 II /ICI;;IN I I 1,;111';', P.,‘,;('',111;,\C',Y IA1'311 I I'(l')1; )1111 1,',VVI;',1 F.,01 1;1 F1)()`,1;11,',11 IIYI `,'(')111-,;11;',1 ()I 1111 ;',1 ';'; ■')A;:1111 ','01l1;11\111 1\11)1 I)11 Il 'Al 1,,)NC)I I\NI)‘',/,1,IN()
(2,1'N 11;C,,1 1111 1 011(,1 01.;1,1/■,11()N \ 1.,)I 1 11 1-'01,1101\I.',',01 1111 I I 1,;1‘11 `i1,1C11 II 1)1 ■•• 11‘1 1 Al,',61 1 1 1 1,1 1")1,;1,1;‘,\ ()I 11,,I 1 1 I;1‘11 l'1,'(')`,11)1 I)(')I;
I I '',11 I Y ()II 6'1 I I I) 0 II II ,,,,I,101..11,! )'1)1,)17),1 I) r)1A 1111 ;1,1 1,rA/112,1 r; WIN) 1111 1-11))1 1 2,1 li/01‘1 I I II.".11 1)1,6,11 I I'I A11,1 I'd'1'111C1 1 AHI If\131 I I(,) )1i I
Foo„,..,rad 1,,Ayrnont.torrriv,l'ot) psy tho `orl, `,cluticm-orl 1,c;loc,m,,I It 1,-;/,,;(,11 ,);•;r,ornr‘nt is incnyo'alcd hole H 1111,Hfc,4 nor A,.)1.,•,,.noilr l'ou
acIcHry,',Ic()qc 1,`,4,01,.'d Agrooln,nt lot 1 f D 1;i",11 . 0,„:".,-01 t'le 1/1110CI 10 d v:111111111111 1'1,,1,11111g dai-,
y,111 ';f,c1.1c; n1 1.11.c.of olio n'id cd,,,,;.,11.1 1 27))poi'nonth thn Intr, ou aro cc lir 1,Jont in'jot r VVP 01)011'10I1C0 0 fl111 V111.,'I It,01 ":
P1)0C1.41) ' 1.10 irry1,3,od oi Lc; %.,.11 of',wild re"...polsilal,tor lox(' d HO.II.:,c,rno.
Propriotnry xch,I,T,of 1,1,,,ed „,.; 10,ta n intorn,:,1 Iclur.11 nrf oth, al L'oir,'1",,licihtsi ard oll ,,;n11,;1;.otc,c,,;1;k:cluro It,4,1 CC'IVail./q1,(71,,,S
'f,1 01011 al 1,,'Igl It iltiq 1111 Coniont pla (cpyrigIT nnJ,ni '101.10;',,, ICI.Id111',), pr'InXt 111,3 vtith n K.,11 1.V,.1`) ap1.11(,,,,i1011F. '011 11(7'n1 o(,1 r;-novo
You rot 1r-110x:1.1', oi oil ni1,,,..n.d1 to,Jr,livc, t`OC.":Q0(r,.1.9 C 11A0111,(..1),J1 f.crn
P,c,,,...rqq.a '.('',1101'911')10 1;1'%."111 11'11:1101'1!, nrd v,..1111',Y,111%,f.C.OJI'll p:.6,",,,,./01('. 011%11',. n;sporp:;11,1('(GI 6117,Jr,;(,1 11111<ncl 'doqInc
Haig]ci cyl in or n' ,,11(,or Yot <",c),.(,,,,not to,,N;;,[),,111 o'111(. 'Aithotit itollorr,IJ,n di l'al'.',1111t 111,,C.11(.11.4.0 H
r,on to 2lerft.1 pchor dcfarrotopz 11;11;:,s,,r1c, vulcp r c,1 1, 4,1 ,Jala ,■11(/
nnirdinl el 'a(.1)all'/ 'IT4011'011( 0111 r",1 0'111(.1 ll'It(.11.`q.illr.1 GI 0 1,t '1'14`,0C 81',' tO
Idf,1 '4)11'0.'.01 01 g II m ;,,,)rnrnt .01 df', %)C,i C,X1,011 contc,ni (,x1,(A oi 18/, 1,.',".111C,i,/1
1111, 111.1.d ',.,114!lig \'.11.1011i;111 rr,ci■ ;)pprovR1,. ni,,xr,11-pliolls.1.,, to ihlorlor, (11,,,up q;',1f lo 1p.11.,1 .,,)11 1101.
a11111011/,`,i11)11i(, ',.)1 I01" )10 dl',1,1,11' 01 (;. 110 11f)Ig0 l'"YdlIC101k,1'1011'1'1'11 d sr)1,1 nu,dr0;) rod, 1,1r,grorn.P.'1 to 1W)lk U.I'd.01 r,
,,,;;;,11 'r.o)r r,t);.,Icn 1(,n r,.(1y,to,';r1r,,,g.",in not if '',orn,,)11,)n;',o, 11',..,p.;1;,o!)Ic, ■';11.1 1(;;,',1111
f,1)111a!)1111.,P,C.1 ' I( Inr,r,To r,c,Irlo!o',3,,,fr,1 ((;11',,rilk, d 1111 011 Act) th, (,I(,phork,Coryurro 1;?,,1 1, r',1,/‘,, c,c)ril'ollinc, of
vou 1111,/,A,C',;),,'(,lo.1 (.,1 11 y()ti in y().ur './C11 1111.1114, 0,,S(.111.',1 of all p,;11(,r11 irlorrulion n th,,, k ;,t,of I"'l'/■,.1,7 1;1'101 y!.:11(jHo
p,; (71/ ,;) o'cr,11.,r(,,:■oric 11; no 1,,N1,1 v/1;,,I,if;'1,(.01'/f, ;.1 gi,T,r, (11,,,All'ig in th(, ti`H. (,(1 t'zpr,i,$) fr,r'hr, rfolKirl
10.Prntecied riforrnation and ACIIOn.S. o' r r,,,,I1(,r inlorn,,,11,,r1'11,,,t 1,,.r,,n;',mit (,1,,LI 1,1 011' Appj.1(
;Air rr,7,y ri,F.pr,, 1').,tir,r' to T.1'1;,11111. 1141)111W:11)1'1 if)ihIld \((,11
ihai ■111 or,,c,n.,,r11 ,ornply [Ai you;)r h1,11,,,f (j(P,'1.11'Iho
ir,:r;11,1 DI ot oo,',1 1,-,J,,,t ,)II ■,11111 1/1'"GI V1.1/I 0111,r 1)1 (x,nt'ol c,Dr
11.10, Yf,11■,'(. 1.11110,)d.11111K, rm)1111;)i'ling `TA l''Jf; (1,.111
f t) 0,11(,1 :,.;)11.,yarr,,11( oihr,1 1,rd 10,111'f,C 11'101'1 aid', 1,,l'...XJ111(:1
ilf.'11 181,', 11.-,I1F.11 11.1c,d (:(11 C,11 C,1 1 7,0 ,1.1' 10 011',",a,11 1)f:118N Vf.,11'afi).:11i. 11',1111.i. 1,111r.. ,131r,init ‘,1U11(:1
cliellt.D. lc'',II c:rn3 ,r)1( c,onn,,-,11oH vvill mil p.o.,1(111K; purst,,,,r A,q'cr,r .1. r, lc, 11111,„ Hr.,1■yl,Ir. ov Icj`ir of GoIHI,Ivillo'4,111.211
1,11c or'd 'rot.\,,,.111 111,,,(,n1rify osN 7,1,1.11,V. ('."11,11 G0‘.;'N Ofl'/ Ntic,11 lifl;(,
aoc• .1 to p. 11,)11..,11" 111011,01 any C11,1.1,11101 1'1.10111 r.„' irloirolioliol oil 1),,rn C;o111,-,111.1„,11 if)1.11
11."torn).He tc foi 111c, aid , I,o `orl' ..,'‘,(;,10.0 111.111.li,),/11 10 ID'Of II 11111a1 ,h19 our' 'unc.,.7 aid oolltihur,,A,111,1ratic,allv
11111,,!,V.011111,41I.' 11' ,`;.1( c)1'1, (If t'w1,111.1P,1 c,'DIP/IGI1c,r,'al do' r.„'i'lot to J".1.;(;11(,t,a1 v./111 bo al c'flit'a:,1 8r1,1
12.Torrnination-D. I 0111 l'ID11011. Ir t4:1'1111U1., [ipenlei %Inv tirn,,if:011 01,Df 11 11Th, HI if I'll 01 GC of tile 1:11qoit) inn' )iAo -,, foi ally' C,011 81111f,011C
GI al IV r1 01':111 0111 pl Ild0d 110.11v vt,t) 'AI lopqt111,eor. pr „ho cid t ail,:exl e.101'(111.a 11111.,11 tr,1 (.,1 R-11c i;nlio.r-1 if you ift,111., H leu,ifift(.-,11
■1', dn. o 111( oi lc!of lc,tc,rn zoul HI(-11c,1 Hot t()rono.,y.Y,au i,r11.11Dir", hi' 1/14 PI 1.';111 (,(A Id of this Aqr,-,nrr,,nt aid fal' o l';10.).C1 'A 11.1111 th (311,dniri
I['dice ,c,p,,,o1 to Agreen,:nt if thn(Om ,,J,I)jec,1 of a whil.01.,. po,ition in hanl,,,,iptc.y or proc,r,ndlio locc,ivol,111; q,11(,,,alic,11 cc,inp:,,,ition
'Kr I).I ffeci cf onnii (Jo(n of`rx,t1.,,, ol torrnin,,,inn Arjir nc v/111 ard all yo1,1 thicmul
Pffrd.,,T,dDic:
'Yo.1 nlav pplf 1111,, it to ni (,1.;111.11. ,,,,11;,1,or 1111,m1 ,:,ontnxt 0.'di DCI1C,:. ,IJG
nilf,rrQ tr.dr.,c; oft, To'8 11-2t.-Hal 1,rox,,,ho` i,,groon-k,r, kr' ag'.111 111 full fc,rc.:',c)r'd hincim on you)),Iles P,o,rr.,;:c. t),.;111 1\lo yin e'4.1 0',`,11' 1)1(.'.'1,C'11101,;(4 K.'Of
DIV,'1 q'11. ionc,dv PII ur in.1,r,Ing%Ind loy tho pmly how ,vni,,r,1 1$,D,Jght 1)o a &Irv., oxnrc,;ing 'ICJ com.,e, C,,n111,0 tO f,''10:`,1'1'01 of of 'Ight
Cf,11F111..1i, 4,'',101'1011 mn-R,,ly or P,H,, or ryrwd,, il/i1J11,,:)(1.1C.IF,,111C.Mai.C.F",r 11 '111,,,6,0r(;.:',rri.,,fil th,t(,rrninod I), 1.11(!,.,1 Lift,of it 1=,
ux old tc,1)c,(1,.,c,rn,..d 1,;11;111c,(, r(;rynin 1, .8,(,,moine.111 v,,11-1cd in P,11 lh(; ot,hr (;1'[link -11(, of Hy,partic,,,
t'le,or."..1r;,(;rnc,nt cl this.t,.w,,urn,,,111 1)cfc,ir. cour, ;',P,It I Al«, [Ito' )c) ,;;Igilr,'1,1-,1,1ov,loa. hild ii,111
'11(twinq of nd 'LC. ono,i.o 'non n non lin rn n.1(1/o' '11c 7,,C,1,;1 '''Julton
ni ",111,:i q101118r (;1(;!..',101'11:.'.;1(;1'1D1J11.", (J,A1111.1! 1110 I 10011';'110 C',Ioh;11 1‘1;11. C',C)11'111'101'C.(; t'11`;',P.gl.',1,11,111 1.0111)!(:1.(,1.,, k,
• 1,..1/1111h1(:,011'01 11,)11..1',11/1ab!.:: I'It ",,C)1'n011,11t.11*, itl, 11'1(X:1)0121A r,f ,-)f rlutu
I:,'A ' Ir. ,,u1-,1(;c1 Ilmof RII prior min 11.1111(.a11011F i,1101'10,,, Or q. 01,11`.0111.af.t I"0111.Silf)11 2qii 'Al()I.0111,
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
ADDITIONAL TERMS AND CONDITIONS
These Additional Terms and Conditions are an Addendum to the Service Agreement entered into
on February 21st, 2017 ("Effective Date") by and between Solutions reach, Inc., d.b.a
Solutionsreach or Smile Reminder (the "Company"), with its principal place of business at 2912
Executive Parkway suite 300 Lehi, UT 84043, and Orange County, a local political subdivision
of the State of North Carolina ("Client"), with its principal place of business at 200 S. Cameron
Street, Hillsborough,North Carolina 27278.
1. The Company shall at all times remain in compliance with all applicable local,
state, and federal laws, rules, and regulations including but not limited to all state and federal
anti-discrimination laws, policies, rules, and regulations. Any violation of this requirement is a
breach of this Agreement and Client may immediately terminate this Agreement without further
obligation on the part of the Client. This paragraph is not intended to limit and does not limit the
definition of breach to discrimination. By executing this Agreement Company affirms that
Company is and shall remain in compliance with Article 2 of Chapter 64 of the North Carolina
General Statutes. By executing this Agreement Company certifies that Provider has not been
identified, and has not utilized the services of any agent or subcontractor, on the list created by
the State Treasurer pursuant to G.S. 147-86.58.
2. Non Appropriation: The Company acknowledges that Client is a governmental
entity, and the validity of this Agreement is based upon the availability of public funding under
the authority of its statutory mandate. In the event that public funds are unavailable and not
appropriated for the performance of Client's obligations under this Agreement, then this
Agreement shall automatically expire without penalty to Client immediately upon written notice
to Company of the unavailability and non-appropriation of public funds.
3. Signatures: This Agreement together with any amendments or modifications may
be executed electronically. All electronic signatures affixed hereto evidence the intent of the
Parties to comply with Article 11A and Article 40 of North Carolina General Statute Chapter 66.
ORANGE COUNTY: CLIENT:
2DocuSigned by: DocuSigned by:
j5 t1AA t,lt, tkeumwtt-rSLt Lam, n.den,444■,
By: OC37904D7CLE477... By: BetErB-Ref4D2...
Bonnie Hammersley, County Manager
Dave Henderson, Senior Sales Manager
Printed Name and Title
Federal Tax ID #:
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
BUSINESS ASSOCIATE AGREEMENT
This Business Associate Agreement ("Agreement") is made effective the 21st day of February,
2017, by and between Orange County Government through its Orange County Health Department
("Covered Entity"), and Solutionreach, Inc., ("Business Associate"). Covered Entity and Business
Associate may be referred herein individually as a "Party" or collectively as the "Parties". This
Agreement supersedes any previously executed Business Associate Agreement between the Parties.
WITNESSETH:
WHEREAS, Sections 261 through 264 of the federal Health Insurance Portability and
Accountability Act of 1996 ("HIPAA"), Public Law 104-191, as modified by the Health Information
Technology for Economic and Clinical Health Act ("HITECH"), Public Law 111-5, known as "the
Administrative Simplification provisions," direct the Department of Health and Human Services to
develop standards to protect the security, confidentiality and integrity of health information; and
WHEREAS, pursuant to the Administrative Simplification provisions, the Secretary of Health and
Human Services ("Secretary") has issued regulations modifying the Privacy, Security, Breach
Notification, and Enforcement Rules at 45 CFR Parts 160 and 164, as the same may be amended from
time to time (the"HIPAA Security and Privacy Rule"); and
WHEREAS, the Parties wish to enter into or have entered into an arrangement whereby Business
Associate will provide certain services to Covered Entity, and, pursuant to such arrangements, Business
Associate may be considered a"Business Associate" of Covered Entity as defined in the HIPAA Security
and Privacy Rule (the agreement evidencing such arrangement is detailed below and hereinafter referred
to as the"Service Agreement(s)"); and
WHEREAS, Business Associate may have access to Protected Health Information (as defined below) in
fulfilling its responsibilities under such arrangement;
THEREFORE, in consideration of the Parties' continuing obligations under the Service Agreement,
compliance with the HIPAA Security and Privacy Rule, and other good and valuable consideration, the
receipt and sufficiency of which is hereby acknowledged, the Parties agree to the provisions of this
Agreement in order to address the requirements of the HIPAA Security and Privacy Rule and to protect
the interests of both Parties.
I. DEFINITIONS
(a) Service Agreement. Agreement(s) for services affected by this HIPAA Business
Associate Agreement, which this Business Associate Agreement shall be attached to, and is (are) hereby
incorporated by reference, and which shall be taken and considered as a part of this document the same as
if fully set out herein:
Solutionreach, Inc. Texting Services Agreement
(b) Catch-all Provision. Except as otherwise defined herein, any and all capitalized terms in
this Agreement shall have the definitions set forth in the HIPAA Security and Privacy Rule, 45 CFR Parts
160 and 164, subparts A and E. In the event of an inconsistency between the provisions of this Agreement
and mandatory provisions of the HIPAA Security and Privacy Rule, as amended, the HIPAA Security and
Privacy Rule shall control. Where provisions of this Agreement are different than those mandated in the
HIPAA Security and Privacy Rule, but are nonetheless permitted by the HIPAA Security and Privacy
Rule,the provisions of this Agreement shall control.
1
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
(c) Electronic Protected Health Information. Protected Health Information that is transmitted
by or maintained in Electronic Media(as defined in the HIPAA Security and Privacy Rule).
(d) Protected Health Information. "Protected Health Information" shall have the same
meaning as the term in 45 CFR § 160.103, limited to the information created or received by Business
Associate from or on behalf of Covered Entity and includes without limitation `Electronic Protected
Health Information." Business Associate acknowledges and agrees that all Protected Health Information
that is created or received by Covered Entity and disclosed or made available in any form,including paper
record, oral communication, audio recording, and electronic display by Covered Entity or its operating
units to Business Associate or is created or received by Business Associate on Covered Entity's behalf
shall be subject to this Agreement.
(e) Required by Law. "Required by Law" shall have the same meaning as the term in 45
CFR § 164.103.
II. OBLIGATIONS AND ACTIVITIES OF BUSINESS ASSOCIATE
(a) Use and Disclosure. Business Associate agrees to fully comply with the requirements
under the HIPPA Security and Privacy Rule applicable to Business Associates and not to use or disclose
Protected Health Information other than as permitted or required by this Agreement, the Service
Agreement or as Required by Law. To the extent Business Associate carries out obligations of Covered
Entity under the HIPAA Security and Privacy Rule, Business Associate shall comply with the applicable
provisions of the HIPAA Security and Privacy Rule as if such use or disclosure were made by Covered
Entity. Business Associate agrees to comply with Covered Entity's policies regarding the minimum
necessary use or disclosure of Protected Health Information.
(b) Appropriate Safeguards. Business Associate agrees to use appropriate safeguards to
prevent use or disclosure of Protected Health Information other than as provided for by this Service
Agreement(s), this Agreement or as Required by Law. This includes the implementation physical,
technical and administrative safeguards to prevent use or disclosure of Protected Health Information other
than as permitted in this Agreement or Required by Law and reasonably and appropriately protect the
confidentiality, integrity, and availability of any Electronic Protected Health Information that it creates,
receives, maintains, or transmits on behalf of Covered Entity as required by the HIPAA Security and
Privacy Rule. The Business Associate shall maintain appropriate documentation of its compliance with
the HIPPA Security and Privacy Rule, including, but not limited to, its policies, procedures, records of
training and sanctions of members in its workforce.
(c) Assurances. Business Associate agrees to provide Covered Entity with written
assurances that any Protected Health Information placed on any type of mobile media, including, but by
no means limited to, lap top computers, Ipads and mobile phones, is encrypted in accordance with
guidance issued by the Secretary.
(d) Agents and Subcontractors. Business Associate shall require any agents, including any
subcontractors, to whom it provides Protected Health Information from Covered Entity that is created,
received, maintained or transmitted on behalf of Business Associate to agree by written contract with
Business Associate to the same (or greater) restrictions, conditions and requirements that apply to
Business Associate with respect to such information, and to agree to implement reasonable and
appropriate safeguards to protect any of such information that is Electronic Protected Health Information.
In addition, Business Associate agrees to take reasonable steps to ensure that its employees' actions or
omissions do not cause Business Associate to breach the terms of this Agreement.
(e) Mitigation of Breach. Business Associate agrees to mitigate, to the extent practicable,
any harmful effect that is known to Business Associate of a use or disclosure of Protected Health
2
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
Information by Business Associate in violation of the requirements of this Agreement, as well as to
provide complete cooperation to Covered Entity should Covered Entity elect to review or investigate such
noncompliance or Security Incident. Business Associate shall cooperate in Covered Entity's breach
analysis and/or risk assessment, if requested. Furthermore, Business Associate shall cooperate with
Covered Entity in the event that Covered Entity determines that any third parties must be notified of a
Breach,provided that Business Associate shall not provide any such notification except at the direction of
Covered Entity.
(f) Breach Reporting. Business Associate shall report in writing to Covered Entity's Privacy
Officer (see Exhibit A), any use or disclosure of Protected Health Information that is not in compliance
with the terms of this Agreement, as well as any Security Incident and any actual or suspected Breach, of
which it becomes aware, without unreasonable delay, and in no event later than forty-eight (48) hours of
such discovery. For purposes of this Agreement, "Security Incident" means the attempted or successful
unauthorized access, use, disclosure, modification, or destruction of information or interference with
system operations in an information system. Such notification shall contain the elements required by 45
C.F.R. § 164.410. Parties agree that notice is hereby deemed given for Unsuccessful Security Incidents, as
defined hereafter and this notice shall satisfy any notices required of Business Associate to Covered
Entity of the ongoing existence and occurrence of Unsuccessful Security Incidents, for which no
additional notice to Covered Entity shall be given or required. An "Unsuccessful Security Incident"
means a security incident that does not result in: (1)the unauthorized access, use, disclosure, modification
or destruction of information; or (2) material interference with system operations in an information
system, including, without limitation, activity such as pings and other broadcast attacks on Business
Associate's firewall,port scans, unsuccessful log-on attempts, denial of service and/or any combination of
the above, so long as no such incident results in unauthorized access,use or disclosure of Electronic PHI.
(g) Compliance. To the extent applicable, Business Associate will comply with (i) Covered
Entity's Notice of Privacy Practices; (ii) any limitations to which Covered Entity has agreed in regard to
an Individual's permission to use or disclose his or her Protected Health Information; and (iii) any
restrictions to the use or disclosure of Protected Health Information to which Covered Entity has agreed
or is required to agree.
(h) Government Access. Business Associate will make its internal practices, books and
records available to the Secretary of the Department of Health and Human Services for purposes of
determining compliance with the terms of the HIPAA Security and Privacy Rule, and, at the request of
the Secretary, will comply with any investigations and compliance reviews,permit access to information,
and cooperate with any complaints, as Required by Law. Without unreasonable delay and, in any event,
no more than 48 hours of receipt of the request or notification, Business Associate will notify Covered
Entity in writing of any request by any governmental entity, or its designee, to review Business
assessment of any kind.
(i) Electronic Transactions. If Business Associate conducts any Standard Transactions for or
on behalf of Covered Entity, Business Associate shall comply with the requirements under the Electronic
Transaction Rule.
(j) Audit. Business Associate shall permit Covered Entity, in its discretion, to conduct an
audit of Business Associate's compliance with this Agreement, HIPAA, and HITECH. Such audit may
consist of an onsite visit, a series of inquiries that require written responses, or both. Business Associate
shall promptly and completely respond to Covered Entity's requests for information in support of the
audit, which shall not be conducted more than once annually except in cases of an actual or reasonably
suspected Security Incident or reasonably suspected noncompliance with this Agreement, HIPAA or
HITECH. Each Party shall bear its own costs associated with the audit.
3
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
(k) Identity Theft. Business Associate shall implement Identity Theft Monitoring Policies
and Procedures to protect any patient information that may be breached by the Business Associate to the
extent applicable under the Federal Trade Commission's Red Flag Rules.
(1) HITECH Compliance. Business Associate shall:
A. Not receive, directly or indirectly, any impermissible remuneration in exchange
for Protected Health Information or Electronic Protected Health Information,
except as permitted by HITECH § 13405(d) or the HIPPA Regulations;
B. Comply with the marketing and other restrictions applicable to Business
Associates contained in HITECH § 13406 and the HIPPA Regulations;
C. To the extent required under HITECH § 13404, fully comply with the applicable
requirements of 45 CFR 164.502(e)(2) for each use and disclosure of Protected
Health Information;
D. To the extent required under HITECH § 13401, fully comply with 45 CFR §§
164.308, 164.310, 164.312, and 164.316;
E. To the extent required under HITECH §§13401 and 13404, comply with the
additional privacy and security requirements that apply to Covered Entities in the
same manner and to the same extent as Covered Entity is required to do so; and
F. To the extent required under the HIPPA Regulations, comply with the privacy
and security requirements that apply to Business Associates.
(m) State Privacy Laws. Business Associate shall understand and comply with state privacy
laws to the extent that such privacy laws are not preempted by HIPPA or HITECH.
III. PERMITTED USES AND DISCLOSURES BY BUSINESS ASSOCIATE
(a) Use of Protected Health Information on Behalf of Covered Entity. Except as otherwise
limited in this Agreement, Business Associate may use or disclose Protected Health Information to
perform functions, activities or services for, or on behalf of, Covered Entity described in the Service
Agreement, provided that such use or disclosure would not violate the HIPPA Security and Privacy Rule
if it were made by Covered Entity or would not violate the Covered Entities minimum necessary policies.
(b) Other Uses of Protected Health Information. Except as otherwise limited in this
Agreement, Business Associate may use Protected Health Information within its workforce for the proper
management and administration of Business Associate not to include Marketing or Commercial Use and
to carry out the legal responsibilities of Business Associate; and
(c) Third Party Confidentiality. Except as otherwise limited in this Agreement, Business
Associate may disclose Protected Health Information for the proper management and administration of
Business Associate or to carry out the legal responsibilities of Business Associate, provided that if
Business Associate discloses any Protected Health Information to a third party for such purpose, the
Business Associate shall enter into a written agreement with such third party requiring the following:
A. Disclosure only as Required by Law; or
B. Business Associate obtains reasonable assurances from the person to whom the
information is disclosed that the information will remain confidential and will be used or
further disclosed only as Required by Law or for the purpose for which it was disclosed
to the person, and the person notifies Business Associate of any instances of which it is
4
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
aware in which the confidentiality, integrity, and or availability of the Protected Health
Information has been breached immediately upon becoming aware.
(d) Business Associate may provide data aggregation services relating to the health care
operations of Covered Entity pursuant to any agreements between the Parties evidencing their business
relationship as permitted by 45 CFR§ 164.504(e)(2)(i)(B).
(e) Other Uses Strictly Limited. Nothing in this Agreement shall permit the Business
Associate to share Protected Health Information with Business Associate's affiliates or contractors except
for the purposes of the Service Agreement(s) between the Covered Entity and Business Associate(s)
identified in Section I(a) of this Agreement.
(f) Covered Entity Authorization for Additional Uses. Any use of Protected Health
Information by Business Associate, its affiliate or Contractor, other than those purposes of this
Agreement, shall require express written authorization by the Covered Entity, and a Business Associate
Agreement or amendment as necessary. Activities which are prohibited include, but are not limited to,
Marketing, as defined by 45 CFR § 164.503 or the sharing for Commercial Use or any purpose construed
by Covered Entity as Marketing or Commercial Use, even if such sharing would be permitted by federal
or state laws.
(g) Business Associate may de-identify Protected Health Information only at the specific
direction of and only for the use of Covered Entity. Business Associate may not sell Protected Health
Information except at the direction of Covered Entity and in compliance with the requirements of the
HIPAA Security and Privacy Rule.
IV. AVAILABILITY OF PHI
(a) Access to Protected Health Information. Business Associate agrees, in the event the
Business Associate maintains protected health information in a Designated Record Set, to make available,
within ten (10) days of a request by Covered Entity in a time and manner designated by Covered Entity,
Protected Health Information in a Designated Record Set, to Covered Entity or as directed by Covered
Entity, to an individual in order to meet the requirements of 45 CFR § 164.524 of the HIPAA Security
and Privacy Rule.
(b) Amendments to Protected Health Information. In the event that the Business Associate
maintains Protected Health Information in a Designated Record Set, Business Associate agrees to make
any amendment(s) to Protected Health Information in a designated record set that the Covered Entity
directs or agrees to pursuant to the HIPAA Security and Privacy Rule at the request of Covered Entity of
an individual,within ten(10) days of receipt of a request from Covered Entity and in the time and manner
designated by Covered Entity.
(c) Accounting of Disclosures. Business Associate agrees to maintain and make available
the information required to provide an accounting of disclosures, as required by 45 CFR § 164.528 of the
HIPAA Security and Privacy Rule. Business Associate will comply with Covered Entity's policy
regarding accounting of disclosures.
(d) Document Disclosures. In the event an Individual makes a request under this Section of
the Agreement directly to Business Associate, Business Associate will notify Covered Entity of such
request within three (3) business days and shall cooperate with, and act only at the direction of Covered
Entity in responding to such request.
V. OBLIGATIONS OF COVERED ENTITY
5
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
(a) Notice of Privacy Practices. Covered Entity shall provide Business Associate with the
notice of privacy practice that Covered Entity produces in accordance with 45 CFR § 164.520, as well as
any changes to that notice.
(b) Notice of Changes in Individual's Access or Protected Health Information. Covered
Entity shall provide Business Associate with any changes in, or revocation of, permission by an
Individual to use or disclose Protected Health Information, is such changes affect Business Associate's
permitted or required uses.
(c) Notice of Restriction in Individual's Access to Protected Health Information. Covered
Entity shall notify Business Associate of any restrictions to the use or disclosure of Protected Health
Information that Covered Entity has agreed in accordance with 45 CFR § 164.522 to the extent that such
restriction may affect Business Associate's use of Protected Health Information.
VI. PERMISSABLE REQUESTS BY COVERED ENTITY
Requests Permissible Under HIPAA. Covered Entity shall not request Business Associate to use
or disclose Protected Health Information in any manner that would not be permissible under the Privacy
or Security Rule.
VII. TERMINATION
(a) Term. This Agreement shall be effective as of the date first set forth above and shall
terminate upon the earlier of (i) the termination of all agreements between the parties, and (ii) the
termination by Covered Entity for cause as provided herein.
(b) Termination for Cause. Notwithstanding anything in this Agreement to the contrary,
Covered Entity shall have the right to terminate this Agreement and the Service Agreement immediately
if Covered Entity determines that Business Associate has or will violated any material term of this
Agreement. Upon Covered Entity's knowledge of a material breach by Business Associate, Covered
Entity shall provide an opportunity for Business Associate to cure the breach or end the violation.
Covered Entity may terminate this Agreement if Business Associate does not cure the breach or end the
violation within the time period specified by Covered Entity. If termination, cure or end of the violation
is not feasible, Covered Entity may report the violation to the Secretary.
(c) Obligation of Business Associate Upon Termination. At termination of this Agreement,
the Service Agreement (or any similar documentation of the business relationship of the Parties), or upon
request of Covered Entity,whichever occurs first, Business Associate, shall:
A. if feasible, return(in a manner or process approved by the Covered Entity) or destroy
all Protected Health Information, regardless of form, including but not limited to
paper or electronic format, received from Covered Entity, or created, maintained or
received by Business Associate on behalf of Covered Entity. Business Associate
shall retain no copies of the Protected Health Information. This provision shall also
apply to Protected Health Information and other confidential information in the
possession of sub-contractors or agents of Business Associate.
B. If such return or destruction is not feasible, Business Associate shall (i) retain only
that Protected Health Information necessary for Business Associate to continue its
proper management and administration or to carry out its legal responsibilities; (ii)
return or destroy the remaining Protected Health Information that the Business
Associate still maintains in any form; (iii) extend the protections of this Agreement to
the retained Protected Health Information; (iv) limit further uses and disclosures to
those purposes that make the return or destruction of the Protected Health
6
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
Information not feasible; and (v) return or destroy the retained Protected Health
Information when it is no longer needed by Business Associate.
(d) Survival. This paragraph shall survive the termination of this Agreement and shall apply
to Protected Health Information created, maintained, or received by Business Associate and any of its
subcontractors.
VIII. MISCELLANEOUS
(a) Indemnification. Each Party agrees to the extent provided by North Carolina law to
indemnify, defend, and hold harmless the Other Party, its officers, agents, contractors and agents,
against, and in respect of, any and all claims, losses, expenses, costs, damages, obligations, penalties,
and liabilities which it may incur by reason of the breach of or failure to perform any the obligations
pursuant to this Agreement, including but not limited to any injury or damages arising from any
noncompliance with this Agreement or any Security Incident attributable to the negligence of Business
Associate, including failure to execute the terms of this Agreement. Further, Each Party agrees to the
extent provided by North Carolina law to indemnify, defend, and hold harmless the Other Party, its
officers, employees, contractors and agents, against all costs and expenses, including but not limited to,
reasonable legal expenses, which are incurred by or on behalf of the Breaching Party in connection with
the defense of such claims.
(b) Disclaimer. Covered Entity makes no warranty or representation that compliance by
Business Associate with this Agreement, HIPAA, HITECH, or the HIPAA Regulations will be adequate
or satisfactory for Business Associate's own purposes. Business Associate is solely responsible for all
decisions made by Business Associate regarding the safeguarding of Protected Health Information.
(c) Assistance in Litigation or Administrative Proceedings. Business Associate shall make
itself, and any subcontractors, employees, affiliates or agents assisting Business Associate in the
performance of its obligations under this Agreement, available to Covered Entity, at no cost to Covered
Entity, to testify as witnesses, or otherwise, in the event of litigation or administrative proceedings being
commenced against Covered Entity, its directors, officers or employees based upon a claimed violation
of HIPAA, HITECH, the HIPAA Regulations, or other laws relating to security and privacy, except
where Business Associate or its subcontractor, employee or agent is named adverse party.
(d) Survival. The obligations of Business Associate under this Agreement shall survive the
expiration, termination, or cancellation of this Agreement, the Service Agreement and/or the business
relationship of the parties, and shall continue to bind Business Associate, its agents, employees,
contractors, successors, and assigns as set forth herein.
(e) Ownership of Information. Covered Entity holds all right, title, and interest in and to the
Protected Health Information and Business Associate does not hold and will not acquire by virtue of this
Agreement or by virtue of providing goods or services to Covered Entity, any right, title, or interest in or
to the PHI or any portion thereof.
(f) Right to Injunctive Relief. Business Associate expressly acknowledges and agrees that
the breach, or threatened breach,by it of any provision of this Agreement may cause Covered Entity to be
irreparably harmed and that Covered Entity may not have an adequate remedy at law. Therefore, Business
Associate agrees that upon such breach, or threatened breach, Covered Entity will be entitled to seek
injunctive relief to prevent Business Associate from commencing or continuing any action constituting
such breach without having to post a bond or other security and without having to prove the inadequacy
of any other available remedies. Nothing in this paragraph will be deemed to limit or abridge any other
remedy available to Covered Entity at law or in equity. Except as expressly stated herein or in the HIPAA
Security and Privacy Rule, the parties to this Agreement do not intend to create any rights in any third
parties.
7
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
(g) Amendment. The Parties agree to take such action as is necessary to amend this
Agreement from time to time as is necessary for Covered Entity to comply with the requirements of the
HIPSS Regulations. In addition, this Agreement may be amended or modified by the Parties only in
writing.
(h) Assignment. No Party may assign its respective rights and obligations under this
Agreement without the prior written consent of the other Party.
(i) Independent Contractor. None of the provisions of this Agreement are intended to create,
nor will they be deemed to create any relationship between the Parties other than that of independent
parties contracting with each other solely for the purposes of effecting the provisions of this Agreement
and any other agreements between the Parties evidencing their business relationship. This Agreement
will be governed by the laws of the State of North Carolina. No change, waiver or discharge of any
liability or obligation hereunder on any one or more occasions shall be deemed a waiver of performance
of any continuing or other obligation, or shall prohibit enforcement of any obligation, on any other
occasion.
(j) Regulatory References. A reference in this Agreement to a section in HIPAA, HITECH
or the HIPAA Regulations means the section as it currently is in effect or as amended.
(k) Interpretation. Any ambiguity in this Agreement shall be resolved in favor of a meaning
that permits Covered Entity to comply with the HIPAA Regulations. The parties agree that, in the event
that any documentation of the arrangement pursuant to which Business Associate provides services to
Covered Entity contains provisions relating to the use or disclosure of Protected Health Information that
are more restrictive than the provisions of this Agreement, the more restrictive provisions will control.
The provisions of this Agreement are intended to establish the minimum requirements regarding Business
Associate's use and disclosure of Protected Health Information.
(1) Severability. In the event any part or parts of this Agreement are held to be
unenforceable, the remainder of this Agreement will continue in effect. In addition, in the event a party
believes in good faith that any provision of this Agreement fails to comply with the then-current
requirements of the HIPAA Security and Privacy Rule, such party shall notify the other party in writing.
For a period of up to (30) thirty days, the parties shall address in good faith such concern and amend the
terms of this Agreement, if necessary to bring it into compliance. If, after such thirty-day period, a party
believes in good faith that the Agreement fails to comply with the HIPAA Security and Privacy Rule,
then either party has the right to terminate upon written notice to the other party.
(m) Notices and Communications. All instructions, notices, consents, demands, or other
communications required or contemplated by this Agreement shall be in writing and shall be delivered to
the Party at the address below:
For Covered Entity: For Business Associate
Orange County Health Department Solutionreach,Inc.
200 W. Tryon Street 2912 Executive Parkway, Suite 300
Hillsborough,NC 27278 Lehi,UT 84043
(n) Strict compliance. No failure by any Party to insist upon strict compliance with any
terms or provisions of this Agreement, to exercise any option, to enforce any right, or to seek any remedy
upon any default of any other Party shall affect, or constitute a waiver of, any Party's right to insist upon
such strict compliance, exercise that option, enforce that right, or seek that remedy with respect to that
default or any prior, or contemporaneous, or subsequent default. No custom or practice of the Parties at
variance with any provisions of this Agreement shall affect, or constitute a waiver of, any Party's right to
demand strict compliance with all provisions of this Agreement.
8
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
(o) Governing Law. This Agreement shall be governed and construed in accordance with the
laws of the State of North Carolina except to the extent that North Carolina laws have been pre-empted by
HIPAA and without giving effect to principals of conflicts of law.
(p) E-Verify. Employers and their subcontractors with 25 or more employees as defined in
Article 2 of Chapter 64 of the NC General Statutes must comply with E-Verify requirements to contract
with governmental units. E-Verify is a Federal program operated by the United States Department of
Homeland Security and other federal agencies, or any successor or equivalent program used to verify the
work authorization of newly hired employees pursuant to federal law. Where applicable, failure to
maintain compliance with the requirements of Article 2 of Chapter 64 of the North Carolina General
Statutes shall constitute breach of this Agreement. If applicable, by executing this Agreement, Business
Associate affirms that they are in compliance with Article 3 of Chapter 64 if the North Carolina General
Statutes.
IN WITNESS WHEREOF, the Parties have executed this Agreement as of the day and year written
above.
CO - ITY: BU SINE.S8g9 CIATE:
V or&&
By. ee 45c40F... By:' C67D9553F8244AE...
Health Director Regulatory Compliance Manager
Title: Title:
9
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
EXHIBIT A
COVERED ENTITY PRIVACY OFFICER CONTACT INFORMATION
To report to Covered Entity any use or disclosure of Protected Health Information not in compliance with
the terms of this Agreement that might be considered a privacy breach, Business Associate should contact
the Privacy Officer at the applicable entity. To report to Covered Entity any Security Incident(as defined
in the Agreement), Business Associate should contact Carla Julian, or the Security Officer at The
Orange County Health Department.
10
October 2013
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
ioo
bell V
Tech Insure Professional ro,,_ Sour]Ow,IT o,uvoi me�m^�
(0I1 n1114)Ilhe
Liability Insurance Policy
...................................................... ...................................................................................................................... ........................................................................................................................................................................................................................................................................................................
LIBERTY SURPLUS INSURANCE CORPORATION
(A New Hampshire Stock Insurance Company,
175 Berkeley Street,Boston,MA 02116)
LIU TECH INSURE DECLARATIONS
THIS IS A CLAIMS MADE AND REPORTED POLICY AND, SUBJECT TO ITS TERMS AND
CONDITIONS,APPLIES ONLY TO ANY CLAIM BOTH FIRST MADE AGAINST THE INSURED
AND REPORTED TO THE COMPANY DURING THE POLICY PERIOD OR EXTENDED
REPORTING PERIOD IF APPLICABLE,AND NOT LATER THAN THIRTY(30)DAYS FOLLOWING
THE END OF THE POLICY PERIOD. DEFENSE COSTS SHALL REDUCE THE APPLICABLE
LIMITS OF LIABILITY AND SUBLIMITS OF LIABILITY AND ARE SUBJECT TO APPLICABLE
DEDUCTIBLES.
The Insurer is a surplus lines insurer,is not licensed by the State and is subject to limited regulation. In the
event of insolvency of the Insurer,the insurance is not covered by the State's guaranty fund.This policy may
be subject to surplus lines taxes,stamping fees,surcharges,and certain surplus lines reporting requirements
mandated by state regulations.The Surplus Lines Broker is responsible for the disclosure of all related taxes,
surcharges, and fees. The Surplus Lines Broker is also responsible for the applicable surplus lines reporting
requirements including but not limited to the submission of diligent search forms.
THIS POLICY CONTAINS MULTIPLE COVERAGE SECTIONS.PLEASE READ THIS POLICY
CAREFULLY AND REVIEW IT WITH YOUR INSURANCE AGENT OR BROKER.
1. Named Insured Solutionreach,Inc
Mailing Address 2912 Executive Parkway
#300
Lehi,UT 84043
Policy Number EO5NAAYMVI003
2. Policy Period Effective Date Expiration Date
March 1,2016 March 1,2017
At 12:01 am at the address At 12:01 am at the address
stated in Item 1 above stated in Item 1 above
3. Premium $59,000
4. Aggregate Limit of Liability $5,000,000
Coverage Limit of Liability Deductible
A. Data Breach Liability $5,000,000 $50,000
1 3
LSI TI P001 (Ed.06 13)
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
ht
iberl
Tech Insure Professional uliniJtt,0 Iva ote�m^�
mix IIn it It)1,Ihe
Liability Insurance Policy
...................................................... ...................................................................................................................... ........................................................................................................................................................................................................................................................................................................
B. Media Liability $5,000,000 $50,000
C. Miscellaneous Professional N/A N/A
Liability
D.Technology Professional $5,000,000 $50,000
Liability
E. Privacy Regulatory Proceedings, $5,000,000 $50,000
Fines and Penalties
F. Notification Costs (inclusive of $5,000,000 $50,000
Computer Forensic Costs)
i. Computer Forensic Costs $1,000,000 $50,000
G. Crisis Management Expenses $100,000 $50,000
H. Network Extortion $5,000,000 $50,000
I. Network Business Interruption $2,500,000
i. Hourly Loss Limit $10,000 per hour 12 Hour Waiting Period
J. Network Asset Damage $2,500,000 $50,000
Supplemental Payments (outside the aggregate limit of liability)
A. Pre-Claim Assistance $20,000 Not Applicable
B. Reimbursement of Daily $10,000 Not Applicable
Expenses
February 1,2010 Insuring Agreements A,D&E ($3M limit)
5. Retroactive Date
March 1,2012 Insuring Agreement B ($3M limit)
March 1,2014 $2M excess$3M
6. Knowledge Date March 1,2014
7. Professional Services Not Applicable
8. Name of Insurer Liberty Surplus Insurance Corporation
2 3
LSI TI P001 (Ed.06 13)
DocuSign Envelope ID:98C1 EFCE-16F1-463F-82E1-11 E2C75006F5
Tech Insure Professional >I tuiunutr .smul u`utee
„.otipt 11 irtionhe
Liability Insurance Policy
...................................................... ...................................................................................................................... ........................................................................................................................................................................................................................................................................................................
9. Notice of Claim By email:
ProfLiabClaims glibertyiu.com
By mail:
Liberty International Underwriters
Professional,Privacy&Technology Liability Department
55 Water Street
23'd Floor
New York,NY 10041
10. Endorsements OFAC (08/09) -U.S.Economic and Trade Sanctions Clause
SC-9 (10/08)—Service Of Suit Clause Utah
LSI-TI-MAN 03-06.13—Medical Malpractice Exclusion
Endorsement
LSI-TI-MAN 04-06.13—Manuscript CAN-SPAM/TCPA
Exclusion Endorsement
LSI-TI-MAN 05-06.13—Manuscript Policy Change
Endorsement
11. Producer RT Specialty
12. Producer Address 330 West Newberry Road
Bloomfield,CT 06002
In witness whereof,the Company has caused this policy to be signed by its President and its Secretary at Boston,
Massachusetts,and countersigned below by a duly authorized representative.
PRESIDENT VICE PRESIDENT and SECRETARY
Christopher L.Peirce Mark C.Touhey
March 14,2016
Date
The insurer issuing in this policy does not hod a certificate of
authority to do business in this state and thus is nit.fully
subject to regulation dy the Utah insurance Commissioner.
3 3 This policy receives no protection from any of the guaranty
LSI TI P001 (Ed.06 13) associations created under Tide .l A, Chapter 28,