AnazaoHealth HIPAA and BAA: what to confirm
AnazaoHealth is a compounding pharmacy, and placing orders through myAnazao involves patient information protected under HIPAA. myAnazao links to a HIPAA Privacy Policy and Electronic Privacy Policy in its footer, which signals HIPAA awareness, but the full safeguard details and a standard business associate agreement are not published on the public login page. Request a signed BAA and written safeguard documentation before you transmit any protected health information.
This page explains why a BAA matters when ordering through a compounder portal and what HIPAA terms to verify with AnazaoHealth.
Proudly Partnered With
Why does a BAA matter when ordering through a compounder?
A business associate agreement is the HIPAA contract that governs how a vendor handling protected health information on a covered entity's behalf must safeguard, use, and disclose that data. When a clinic places a compounded order, patient details flow to the pharmacy for fulfillment, which generally makes the compounder and its ordering portal business associates. A signed BAA plus documented administrative, physical, and technical safeguards is the baseline a clinic should require. myAnazao publishes a HIPAA Privacy Policy link, but obtain the actual BAA and safeguard details directly before sending PHI.
What to confirm about AnazaoHealth and HIPAA
Each row is a HIPAA criterion, what AnazaoHealth publishes publicly, and the document or commitment to request before sharing PHI.
Sourced from myAnazao.com and AnazaoHealth public website (anazaohealth.com), reviewed June 2026. Confirm HIPAA terms in writing and review with your own counsel.
Request HIPAA docs during onboarding, or start with a BAA at signup?
AnazaoHealth
You will request and review HIPAA documentation during pharmacy onboarding.
- You will obtain a signed BAA from AnazaoHealth before transmitting PHI through myAnazao.
- Your compliance team is comfortable reviewing privacy policies and safeguard docs manually.
- You only order through Anazao and do not need a separate platform BAA.
Fizy Health
You want a BAA at onboarding and audited patient access built into the platform.
- You want a signed BAA as part of self-serve onboarding before any patient data is entered.
- You want patient-linked cart actions audited per line with organization-scoped access.
- You batch orders across multiple LegitScript-certified partners and need one HIPAA posture.
What HIPAA-aware ordering looks like day to day.
Compliance is not a PDF in a drawer — it shows up in how patient data is scoped, accessed, and audited.
BAA signed before your first patient line
Every clinic signs a BAA at onboarding before patient-linked cart actions begin.
Every cart mutation audited per patient line
Patient-linked cart actions are recorded with organization-scoped access controls.
Team access scoped to your organization
Role-based team management keeps PHI inside the right clinic boundary.
What clinics ask about AnazaoHealth and HIPAA.
- Definition
Is AnazaoHealth HIPAA-compliant and does it offer a BAA?
AnazaoHealth handles patient-specific orders protected under HIPAA and links to a HIPAA Privacy Policy on myAnazao. A signed business associate agreement is the baseline a clinic should require, but the BAA is not published on the public login page — request it before transmitting PHI.
- Policy
Does AnazaoHealth publish a HIPAA privacy policy?
myAnazao links to a HIPAA Privacy Policy and Electronic Privacy Policy in its footer. Review these during onboarding and request the full BAA and safeguard documentation separately.
- PHI
What patient information does myAnazao handle?
Placing a compounded order requires patient identity, prescriber information, and directions for use — all protected health information. Confirm what fields are collected, stored, and retained in myAnazao.
- Access
Who can access patient data in myAnazao?
AnazaoHealth does not publish role-based access details on the public site. Ask who at your clinic and at AnazaoHealth can view patient records and how access is logged.
- Pharmacy
Is AnazaoHealth itself a covered entity or business associate?
As the compounding pharmacy receiving prescriptions and patient details for fulfillment, AnazaoHealth functions as a business associate to your clinic. Confirm the BAA covers both the pharmacy and the myAnazao portal.
- Alternative
How does Fizy Health handle HIPAA and BAA?
Fizy Health signs a BAA at onboarding, scopes patient access to your organization, and audits patient-linked cart actions per line. All pharmacy partners in the network are LegitScript-certified 503A compounders.
Sources reviewed June 2026
- myAnazao prescriber portal (myanazao.com), reviewed June 2026.
- AnazaoHealth public website (anazaohealth.com), reviewed June 2026.
- Fizy Health platform capabilities reflect the live product.
Start with a BAA, then batch your whole refill list.
Fizy Health signs a BAA at onboarding and audits patient-linked cart actions per line. Free to start.