The fine print, kept readable

BUSINESS ASSOCIATE AGREEMENT

OUR BUSINESS ASSOCIATE AGREEMENT

Olamee Corp.'s Business Associate Agreement (BAA) is available for customers who use the Service to process Protected Health Information (PHI) subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA). Where a customer is a covered entity or a business associate and uses the Service — through the TimeWorks Sub-Portal — in a way that involves PHI, Olamee Corp. acts as a business associate or subcontractor business associate, and the BAA sets out the parties' respective obligations for safeguarding that PHI in accordance with HIPAA.

Unlike our Data Processing Addendum, which applies broadly to data protection laws such as the GDPR, the BAA applies only to customers who process PHI. If HIPAA does not apply to your use of the Service, you do not need a BAA.

HOW PHI IS HANDLED

Olamee Corp. processes PHI only where a BAA is in place, and only within HIPAA-configured accounts that are separated from standard accounts. PHI is handled in accordance with the safeguards described in the BAA and is not used for any purpose other than providing the Service, except as HIPAA permits.

REQUEST AND EXECUTE A BAA

A BAA must be entered into before any PHI is processed through the Service. If HIPAA applies to your use of the Service, you can request our BAA by contacting us at [email protected]. Please include the account name, username, and/or email address associated with your account. Once executed, the BAA governs the processing of your PHI in addition to the Agreement and any applicable Data Processing Addendum.