Glossary of Compliance
Compliance Glossary
Our list of curated compliance glossary offers everything you to know about compliance in one place.
BAA
A Business Associate Agreement (BAA) is a signed agreement between covered entities and business associates. HIPAA privacy rule mandates that covered entities who share PHI with third party service providers specify the responsibilities of each party to secure PHI.
A BAA must describe the permitted rules to use or disclose PHI and require the business associate to implement appropriate safeguard to maintain the security of PHI.
Additional reading
Sprinto Vs Vanta Vs Metricstream: Which Platform Should You Choose?
If your team is comparing Sprinto, Vanta, and MetricStream, you are really choosing between three different operating models. Sprinto is built for teams that want continuous compliance, risk, vendor oversight, questionnaires, and AI governance in one connected platform. Vanta is the easiest speed-first option for lean teams that want broad integrations and a guided path to audit readiness. MetricStream is the heavyweight enterprise GRC option for organizations that need deep internal audit, policy, compliance, risk, and third-party management across a larger operating footprint.
The Ultimate SOC 2 Questionnaire for Audit Preparation
TL;DR The hardest thing about SOC 2 is knowing where to start. What makes it even tougher is the fact there’s no easy template to follow – every SOC 2 audit is unique to the organization carrying it out. However, there’s no need to despair! “While there’s no one size fits all answer, there are…
Get GDPR Compliance Consulting Services: Choose from Top 10 GDPR Consultants
TL;DR GDPR consultants help organizations turn GDPR requirements into practical privacy workflows by assessing data practices, mapping personal data, identifying compliance gaps, developing policies, training teams, and preparing breach response plans. This guide compares organizations for GDPR compliance, such as Foresite Cybersecurity, SharkStriker, ALKU, BD Emerson, and Odaseva, as well as individual GDPR consultants and…
Sprinto: Your growth superpower
Use Sprinto to centralize security compliance management – so nothing
gets in the way of your moving up and winning big.
