The agreement prohibits users from submitting or processing Protected Health Information through the non-Enterprise platform. This prohibition applies until and unless the user has subscribed to the Enterprise version and executed a Business Associate Agreement with Writer.
This analysis describes what Writer's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a clear contractual and compliance boundary for HIPAA-regulated information, restricting PHI processing to Enterprise accounts with an executed BAA. Users or organizations submitting PHI outside these conditions would be operating in breach of these terms and outside the HIPAA-compliant service boundary.
Under this clause, submitting patient, medical, or other Protected Health Information through Writer's non-Enterprise platform is prohibited. Organizations in healthcare or other HIPAA-covered sectors must subscribe to the Enterprise tier and execute a BAA before using Writer for any PHI-related workflows.
Cross-platform context
See how other platforms handle HIPAA and Protected Health Information Restriction and similar clauses.
Compare across platforms →"to process any patient, medical or other protected health information regulated by the Health Insurance Portability and Accountability Act of 1996 ('HIPAA') or any similar U.S. federal or state laws, rules or regulations ('Protected Health Information') or otherwise share such information with us until and unless you subscribe to the Enterprise version of our Platform and have entered into a business associate agreement (a 'BAA') with usExcerpt from Writer's Terms of Service
REGULATORY LANDSCAPE: This provision directly engages HIPAA and its implementing regulations, including the Privacy Rule and Security Rule.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a clear contractual and compliance boundary for HIPAA-regulated information, restricting PHI processing to Enterprise accounts with an executed BAA. Users or organizations submitting PHI outside these conditions would be operating in breach of these terms and outside the HIPAA-compliant service boundary.
Under this clause, submitting patient, medical, or other Protected Health Information through Writer's non-Enterprise platform is prohibited. Organizations in healthcare or other HIPAA-covered sectors must subscribe to the Enterprise tier and execute a BAA before using Writer for any PHI-related workflows.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Writer.