Business Associate
Agreement
LightTrail provides a BAA as standard with every contract. It covers all analytics data handled by the platform, and your legal team can review it before you sign.
What the BAA covers
The BAA covers LightTrail's handling of any data that could be considered protected under HIPAA. This includes all analytics data processed by the platform on behalf of your organization. Because LightTrail's architecture is designed to avoid collecting PHI in the first place, the BAA functions as an additional layer of contractual protection for data that is already handled in a compliant manner.
Data covered under the BAA.
The agreement covers all categories of data that LightTrail processes on your behalf.
Session and behavioral data
Page views, session flow, navigation paths, and engagement patterns collected by the platform.
Conversion events
Form submissions, appointment requests, phone clicks, and other goal completions tracked through LightTrail.
Derived geographic data
City-level and zip-level location data derived from IP addresses during the collect-derive-discard process.
Campaign attribution data
UTM parameters, referral sources, and channel data tied to visitor sessions and conversions.
How to get a BAA.
Included with every contract
The BAA is part of every LightTrail agreement. There is no separate negotiation, no additional fee, and no premium tier required to receive one. Every customer gets the same coverage.
Available for pre-signing review
Prospects who want their legal or compliance team to review the BAA before committing can request a copy through the contact form. No sales commitment is required to receive a review copy.
Executed during onboarding
The BAA is signed as part of the standard onboarding process. By the time your team starts using LightTrail, the agreement is already in place.
Ready to review the BAA?
Request a copy of the BAA for your legal team to review, or book a demo to see LightTrail in action and discuss compliance requirements with our team.