Establishing secure connection…Loading editor…Preparing document…

Business PHA Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS PHA AGREEMENT

RECITALS

WHEREAS, Client Name: (the "Client") operates facilities, processes, or services for which a Process Hazard Analysis (PHA) is required to identify hazards, evaluate risks, and recommend mitigations; and

WHEREAS, Contractor Name: (the "Contractor") provides professional PHA, risk assessment, and technical consulting services and has represented the capability to perform the services described herein; and

NOW, THEREFORE, in consideration of the mutual covenants contained in this Agreement, the parties agree as follows:

1. SCOPE OF WORK

Contractor shall perform a Process Hazard Analysis (PHA) for the Client's identified processes, including hazard identification, consequence analysis, risk ranking, and mitigation recommendations. The scope shall include site review, process data review, stakeholder interviews, facilitation of PHA sessions, and final report delivery.

2. DELIVERABLES & SCHEDULE

Deliverables shall include: (a) preliminary findings memorandum, (b) draft PHA report, (c) final PHA report incorporating Client comments, and (d) a prioritized mitigation register. The preliminary findings memorandum shall be delivered within days after site visit.

3. PAYMENT TERMS

Client shall pay Contractor the fees set forth below in consideration for services rendered under this Agreement. All fees are exclusive of applicable taxes unless otherwise stated.

Unless otherwise agreed in writing, invoices are due net days from invoice date. Late payments shall bear interest at per month (or the highest lawful rate, if lower), plus any reasonable collection costs.

4. TERM AND TERMINATION

This Agreement shall commence on Start Date: and continue until End Date: , unless earlier terminated in accordance with this Section.

Either party may terminate this Agreement for convenience upon written notice to the other party given at least Notice Period (days): days prior to the effective date of termination. Upon termination for convenience, Contractor shall be entitled to payment for services performed up to the effective date of termination and reasonable close-out costs.

Either party may terminate for material breach if the breaching party fails to cure the breach within days after receipt of written notice specifying the breach.

5. CONFIDENTIALITY

"Confidential Information" means any non-public, proprietary, or commercially sensitive information disclosed by one party to the other in connection with this Agreement, whether disclosed orally, in writing, or by inspection. Each party shall: (a) protect Confidential Information with at least the same degree of care it uses to protect its own confidential information but no less than reasonable care; (b) use Confidential Information only to perform its obligations or exercise its rights under this Agreement; and (c) not disclose Confidential Information to any third party except to employees, agents, or subcontractors who have a need to know and are bound by confidentiality obligations at least as protective as those herein.

Confidentiality obligations shall remain in effect for Confidentiality Period (years): years following termination or expiration of this Agreement, except as required by applicable law or judicial process.

6. INTELLECTUAL PROPERTY

Subject to full payment of all amounts due, Contractor hereby grants to Client a non-exclusive, non-transferable license to use the final PHA deliverables for Client’s internal operations. Contractor retains ownership of its underlying methodologies, tools, templates, and intellectual property. Any third-party materials incorporated shall remain subject to their owners' licenses.

7. REPRESENTATIONS, WARRANTIES AND LIMITATION OF LIABILITY

Each party represents that it has the authority to enter into this Agreement. Contractor warrants that services will be performed in a professional and workmanlike manner consistent with industry standards. EXCEPT FOR THE FOREGOING WARRANTY, CONTRACTOR MAKES NO OTHER WARRANTIES, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, CONTRACTOR'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT SHALL NOT EXCEED THE TOTAL AMOUNTS PAID BY CLIENT TO CONTRACTOR UNDER THIS AGREEMENT.

8. INSURANCE AND INDEMNITY

Contractor shall maintain commercial general liability and professional liability insurance in amounts customary for the industry. Contractor shall indemnify and hold harmless Client from third-party claims to the extent caused by Contractor's negligent performance or willful misconduct, subject to the limitations set forth in this Agreement.

9. GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of Governing State: without regard to conflict-of-law principles.

10. ENTIRE AGREEMENT

This Agreement, including any schedules or attachments signed by the parties, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, negotiations, and understandings, whether written or oral.

11. NOTICES

Notices shall be sent to the contact addresses set forth above and shall be effective upon receipt when delivered by hand, courier, or certified mail, or on the date of transmission if sent by confirmed electronic mail.

EXECUTION

The parties acknowledge that they have read and understand this Agreement and agree to be bound by its terms. This Agreement may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument.

Client Printed Name:

By:

Date:

Contractor Printed Name:

By:

Date:

Enter text✕

What the Business PHA Document Is and when it’s used

The Business PHA Document is a workplace Personal Health Assessment used by employers and occupational health teams to collect health-related information for risk mitigation, return-to-work clearance, contact tracing, or accommodation decisions. Typical content includes personal identifiers, symptom and exposure checklists, vaccination and testing history, medical clearance notes, and a signature/consent block. Because the form collects protected health information (PHI) in many cases, use and storage must follow HIPAA and applicable state privacy rules. Electronic completion and e-signature are legally acceptable when ESIGN and state electronic transaction laws are satisfied.

Why a structured Business PHA Document matters

A standardized Business PHA Document reduces inconsistent intake, creates an auditable record of consent and clinical status, and shortens the time between reporting and action while preserving legal defensibility under ESIGN and state e-signature law.

Why a structured Business PHA Document matters

Who typically completes and manages this form

The Business PHA Document is commonly used by HR, occupational health, and supervisors who manage workplace health and safety.

  • HR managers and benefits teams who intake, review, and retain employee health disclosures for administrative decisions.
  • Occupational health clinicians or contracted nurse practitioners who evaluate symptoms and issue fitness-for-duty notes.
  • Facilities and operations supervisors who receive clearance notifications and coordinate workplace accommodations or isolation.

Distribution varies by company size, but secure handling and role-based access are consistent best practices.

Primary users and signers

Occupational Health Clinician

A healthcare professional (nurse or physician) who reviews assessment responses, documents clinical findings and clearance status, and signs medical sections. Their entries are treated as PHI and require appropriate access controls and retention.

Human Resources

HR staff receive completed assessments, apply employment policies, and manage retention. HR often controls routing, obtains consent for electronic transmission, and ensures privacy protections are in place.

Essential elements to include in a professional Business PHA Document

Design the form so each component supports legal compliance and quick clinical interpretation: identify the signer, capture consent, record clinical data, document reviewer conclusions, set retention rules, and create an auditable signature record.

Identification

Full legal name, date of birth, employee or patient ID, and contact information to ensure accurate attribution and follow-up.

Symptom/Exposure Checklist

Simple yes/no symptom list with onset dates and exposure history to support clinical triage and workplace decisions.

Vaccination/Testing Status

Fields for vaccine dates, manufacturer, and latest test results; allow file upload for supporting documentation.

Medical Clearance

Clinician section for fitness-for-duty, restrictions, or return-to-work date, with a clear effective date.

Consent and Authorization

Explicit consent language covering electronic records, disclosure to relevant parties, and withdrawal instructions.

Signature & Audit Trail

Signed and dated block with an audit trail including signer identity, timestamp, IP or authentication method, and version history.

Step-by-step: collecting a completed Business PHA Document

Follow a short, auditable workflow to collect, review, and store PHA forms while preserving privacy and legal validity.

  • 01
    Prepare Form: Configure required fields, consent language, and any conditional questions before sending.
  • 02
    Obtain Consent: Present ESIGN consumer disclosure for electronic records where consumer-facing, and capture affirmative consent.
  • 03
    Verify Identity: Authenticate the signer via email, SMS code, or stronger methods for higher-risk assessments.
  • 04
    Sign and Store: Collect signature, generate audit trail, and store securely in the allocated record repository.

Typical online workflow settings for the PHA form

Configure these core workflow settings to align authentication, routing, and recordkeeping with your compliance needs.

Field Configuration
Authentication Method Email link, SMS code, or two-factor authentication
Notifications Automatic email reminders and completion alerts
Storage Location Encrypted cloud folder (Box, Google Drive, or on-prem archive)
Retention Setting Auto-archive or delete per retention policy

How eSubmission of the Business PHA Document typically flows

A typical eSubmission workflow includes upload, field placement, signer routing, authentication, signing, and archival with an audit trail.

  • Upload Document: Import PDF or DOCX into the eSignature platform.
  • Place Fields: Add required data, checkbox, and signature fields.
  • Send to Signer: Deliver via secure link or authenticated email.
  • Receive Signed Copy: Store signed PDF with certificate of completion.

Technical requirements and integrations to consider

Ensure the platform supports required authentication, secure storage, and the integrations your organization uses.

  • Integrations: Salesforce, Microsoft 365, NetSuite, Google Workspace
  • File Formats: PDF, DOCX, HTML supported
  • Authentication: Email, SMS, KBA, SSO

Security and compliance controls to include

Encryption: TLS 1.2/1.3 in transit; AES-256 at rest
Audit Trail: Capture timestamp, IP, and action history
HIPAA (BAA): Execute a BAA when handling PHI
21 CFR Part 11: Use compliant controls for FDA-regulated records
SOC 2 Type II: Independent controls report available
Access Controls: Role-based access and SSO when possible

Key legal and operational risks if the form is mishandled

HIPAA Fines: Civil and monetary penalties for PHI breaches
I-9 Noncompliance: Recordkeeping errors can trigger fines
Data Breach Costs: Notification and remediation expenses
Invalid Consent: Missing ESIGN consumer disclosure may void electronic acceptance
Incorrect Medical Clearance: Workplace safety incidents and liability exposure
Retention Failures: Loss of evidence for future claims

Common preparation errors to avoid

  • Using free-text where structured choices are needed, causing inconsistent data
  • Failing to capture explicit electronic consent when required by ESIGN
  • Storing PHI in unsecured or shared folders without encryption
  • Not documenting reviewer identity and decision rationale

Timing and critical deadlines to manage

Track completion, review, and statutory retention deadlines to maintain compliance and preserve evidence.

Employee Completion:

At hire or before return to work as employer policy requires

Clinical Review:

Timely review, typically within 48–72 hours after submission

I-9 Retention:

Keep I-9 three years after hire or one year after termination, whichever is later (8 CFR §274a.2)

HIPAA Retention:

Retain PHI for 6 years (45 CFR §164.530(j))

Incident Reporting:

Report workplace incidents per OSHA and state timelines when applicable

Comparing baseline eSignature pricing and capabilities for PHA workflows

Baseline vendor comparison for common buying criteria; signNow is listed first per standard vendor ordering. Confirm feature availability and enterprise options with each provider.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies Varies Varies Varies
Bulk Send Yes Yes Yes Yes Varies
Audit Trail Yes Yes Yes Yes Yes
Envelope Cap No cap 100 envelopes/user/year Varies by plan Varies by plan Varies by plan

Real-world examples of electronic PHAs in use

These examples illustrate how organizations replaced paper intake with digital workflows for compliance and speed.

Fertility Centers of Illinois

The clinic moved intake forms online to reduce processing time and protect PHI.

  • They integrated signing with clinical records.
  • The vendor team supported secure API integration and responsive support, which helped the clinic maintain regulatory controls while improving patient experience.

Martin Properties

A property management firm used electronic forms to document staff health and access decisions.

  • Mobile signing enabled onsite data capture.
  • Centralized, auditable records allowed faster operational decisions and consistent adherence to site safety policies without repeated paper handling.

Practical tips for accurate and efficient completion

Small changes to form design and process reduce errors and protect privacy.

Use structured inputs
Prefer checkboxes, drop-downs, and date pickers to free text to reduce ambiguity and speed analysis.
Capture explicit consent
Show the ESIGN disclosure when required and record affirmative consent for electronic delivery and signatures.
Limit PHI exposure
Only collect fields necessary for the specific purpose and segregate clinical notes from personnel files.
Automate routing
Route completed assessments to the right reviewer and archive automatically per retention policy.

Frequently asked questions about Business PHA Documents

Answers to common questions about validity, signing, storage, and compliance when handling health assessments.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users