The Data Developers standard biomedical data estate is built from public source authorities and does not require protected health information. Customers normally receive public biomedical reference and intelligence products directly inside their own BigQuery or Snowflake environment.

A Business Associate Agreement is available on request when a customer use case, procurement policy, or downstream workflow requires HIPAA-aligned contractual coverage. The final scope depends on the services purchased and the data flow approved by both parties.

Customers may choose to join The Data Developers public context layers with internal data in their own cloud warehouse. Those joins remain under customer-controlled IAM, Snowflake roles, audit logging, and internal governance policies.

The service is designed around least-privilege delivery, public-data lineage, source refresh logs, controlled access review, and cloud-native permissions. BAA-specific controls and reporting obligations are documented during contract review.

The standard website and catalog experience does not collect PHI. The standard context layers are not a patient engagement system, EHR connector, claims processor, or clinical care application. Any non-standard workflow involving PHI must be scoped separately before activation.

Procurement, legal, or security teams can request a BAA review during demo or contract negotiation. We will confirm the data flow, cloud delivery method, responsible parties, and required exhibits before signature.