Scope
Define covered services, participants, and whether sessions include clinical care, consults, therapy, or administrative video calls; restrict PHI use to stated purposes and business operations.
A clear addendum reduces legal and operational ambiguity when PHI is conveyed over video platforms, documenting security settings, consent, and vendor responsibilities under HIPAA and related federal rules.
Organizations and individuals that exchange PHI by videoconference use this addendum to document responsibilities and obtain required consents.
Signatories normally include an authorized representative from the healthcare provider, a vendor representative (if applicable), and sometimes an institutional legal or compliance approver.
Define covered services, participants, and whether sessions include clinical care, consults, therapy, or administrative video calls; restrict PHI use to stated purposes and business operations.
State whether an existing Business Associate Agreement governs PHI exchanges and confirm that platform use is subject to that BAA or attach a supplemental BAA where required.
Specify minimum settings such as meeting passwords, waiting rooms, end-to-end encryption options if available, disabled participant screen sharing by default, and logging of session access.
Clarify whether recordings are permitted, who controls recording, consent requirements, storage location, retention period, and access controls for recorded PHI.
Assign roles and timelines for breach notification, investigation, evidence preservation, and cooperation with regulators and affected individuals consistent with HIPAA breach rules.
Allocate responsibility for security failures, permit audits or attestations of controls, and identify applicable law and dispute resolution procedures.
| Field | Configuration |
|---|---|
| Authentication Method | Email link or SMS code for signer verification |
| Signature Order | Provider signs last after BAA and technical sign-off |
| Attachment | Store signed addendum with patient record |
| Retention Tag | Apply HIPAA retention metadata |
Decide how you will distribute the addendum: direct email to authorized signers, secure patient portals, or via an eSignature platform integrated with your EHR.
Ensure any integration preserves the signed PDF, audit trail, and metadata. Use platforms that support PDF, DOCX, and secure cloud storage connectors with access controls and logging.
Execute before any PHI is transmitted
Obtain prior to the first telehealth encounter
Complete vendor configuration checks before go-live
Disclose and document consent before recording
Set per HIPAA and organizational policy
Implemented a telehealth addendum for virtual consultations and embryo monitoring
Adopted a video addendum for inspections and tenant interactions
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | Yes, 7-day free trial | Varies by vendor | Varies by vendor | Varies by vendor | Varies by vendor |
| Bulk Send | Yes (Premium tier) | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No envelope cap | 100 envelopes/user/year | Varies | Varies | Varies |