Skip to main content
Code42 Support

Obtaining a BAA with Code42

Applies to:
  • CrashPlan PROe
  • Code42 CrashPlan (previously CrashPlan PROe)


Covered Entities under HIPAA must have a signed Business Associate Agreement (BAA) with Code42 prior to using Code42 products to store electronic protected health information. Whether or not Code42 can act as a Business Associate depends on:

  • the product plan (Code42 server version 5.4 and later)
  • the product offering and deployment model (Code42 server version 5.3.x and earlier)

The Code42 sales team can facilitate execution of BAAs with HIPAA Covered Entities for customers with Code42 for Enterprise.

BAA requirements

BAA requirements for Code42 for Enterprise

Customers on Code42 server version 5.4 and later: Code42 will enter into a BAA based on your Code42 for Enterprise product plan at the time the BAA is executed.

Customers on Code42 server version 5.3.x and earlier: Code42 will enter into a BAA based on the configuration of your Code42 for Enterprise deployment at the time the BAA is executed:

  • Code42 can act as a Business Associate for Code42 for Enterprise deployments configured to use an on-premises authority server
  • Code42 cannot act as a Business Associate for Code42 for Enterprise fully-hosted public cloud deployments

BAA requirements for CrashPlan for Small Business (previously CrashPlan PRO)

At this time, Code42 will not execute BAAs for CrashPlan for Small Business.

Obtain a BAA with Code42

Contact our sales representatives for more information about obtaining a BAA.

  • New customer: Please contact sales.
  • Existing customer: Please contact your Code42 representative. If you do not know how to contact your Code42 representative, you can contact us through our website.

Customers with an existing BAA

If you have already signed a BAA with Code42 and are contemplating a change to your deployment model or product plan, please contact sales to determine whether the changes you are considering affect your compliance with the applicable laws and regulations, and whether Code42 will be able to continue to provide service as a Business Associate under the BAA.

Code42 configuration requirements to support HIPAA
Changes to your configuration or deployment that are not consistent with Code42's documented configuration requirements for CrashPlan may affect your HIPAA compliance and Code42's ability to provide service under the BAA.