azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

docs: Cascades Microsoft BAA resolved — covered by MCA for Business plan subscribers

Browse Source 
Gap #13 in hipaa.md marked resolved. Same update in hipaa-caregiver-controls.md and m365.md.
Confirmed 2026-05-14: no separate HIPAA BAA acceptance exists or is required for M365 Business
plan tenants under the Microsoft Customer Agreement.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Howard Enos
2026-05-14 18:49:41 -07:00
parent 3a3f92d5d5
commit e29ed50cd9
3 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
clients/cascades-tucson/docs/security/hipaa-caregiver-controls.md
View File

@@ -154,7 +154,7 @@ If any of these become false, the architecture must be reviewed and either resto
These are independent gaps tracked elsewhere; they predate and are not introduced by this architecture:
- **Microsoft BAA not yet signed.** Required under §164.308(b)(1). Tracked in `docs/cloud/m365.md:288`.
- **Microsoft BAA — resolved 2026-05-14.** Covered automatically by the Microsoft Customer Agreement for Business plan subscribers. No separate acceptance required.
- **ALIS BAA not yet verified.** Required under §164.308(b)(1). Tracked in `docs/billing-log.md:254`.
Both must be in place before treating any of this as a complete HIPAA program.