This is the agreement a practice accepts during setup. The version above is recorded with the acceptance for the practice's HIPAA audit trail. It does not modify the Terms of Service or Privacy Policy.

Velyn Dental — Business Associate Agreement (DRAFT 2026-06.1) PENDING LEGAL REVIEW. This reference text is a placeholder pending counsel sign-off. It is hashed solely to pin which agreement version a covered entity accepted; it is not legal advice and does not modify the published Terms or Privacy Policy. 1. Parties. This Business Associate Agreement is between the dental practice (the "Covered Entity") and Autonomy AI, Inc., operating Velyn ("Business Associate"), and governs Protected Health Information (PHI) processed while Velyn handles phone-system calls on the Covered Entity's behalf. 2. Permitted uses. Business Associate may use and disclose PHI only as required to provide the Velyn answering and scheduling service, as permitted by the Privacy Rule, and as the Covered Entity directs. 3. Safeguards. Business Associate will maintain administrative, physical, and technical safeguards consistent with the Security Rule (45 CFR Part 164, Subpart C) for the PHI it creates, receives, maintains, or transmits. 4. Signer authority. The individual accepting this agreement attests that they are an authorized owner or administrator of the Covered Entity with authority to bind it to this agreement. 5. Workforce training. The Covered Entity attests that its workforce with access to the Velyn service has received HIPAA privacy and security training and that it does not share login credentials. 6. Scope of attestation. Velyn records the Covered Entity's attestations above; Velyn does not audit, verify, or certify the Covered Entity's HIPAA compliance program. 7. Term and termination. This agreement is effective on acceptance and continues until terminated; on termination Business Associate will return or destroy PHI where feasible.