Simple pricing.
No surprises.

This Business Associate Agreement is entered into between your organization ("Covered Entity") and Cavan Ventures, LLC operating as CriteriaIQ ("Business Associate"), located in Deerfield Beach, Florida, and governs the handling of Protected Health Information in connection with your use of the CriteriaIQ platform.

Key Obligations

• PHI used only as necessary to provide the platform and as required by law.
• Full HIPAA Security Rule compliance — administrative, physical, and technical safeguards.
• Breach notification within 30 days of discovery per 45 CFR § 164.410.
• AI analysis functions process PHI in-memory only — never stored in any AI training dataset.
• PHI access and amendment within 5 business days per 45 CFR §§ 164.524 and 164.526.
• Upon termination, all PHI returned or destroyed within 30 days with written confirmation.
• Covered Entity owns all PHI under this Agreement.

Note: CriteriaIQ uses the Anthropic Claude API for AI processing. Cavan Ventures, LLC is actively pursuing a BAA with Anthropic, Inc. Until executed, treat outputs as clinical decision support reviewed by a licensed clinician. Full BAA: criteriaiq.com/baa-request/