The Business Associate Agreement Tool There are firms and people that your practice does business with that are not covered entities and therefore not under the HIPAA law. You must have a Business Associate Agreement signed with each of these entities. HIPAAps.com includes a special tool for you to use to track the sending and receipt of these agreements. A sample Business Associate Agreement is included in the forms library