Service Subscription, Data Processing, and Business Associate Agreements
(For Physicians, Clinics and Practice Owners in Africa)
This Agreement is made between:
Work Chop Inc.
(a California corporation with registered office in San Diego, CA, USA)
("Work Chop", "we", "us")
and
You (the "Subscriber", "Clinic", "Practice", "you")
an individual physician or authorized representative of a medical practice registering to use EHR-Africa.
By clicking "I Accept", checking the acceptance box, or using the EHR-Africa platform, you agree to the following terms effective from the date of acceptance.
Work Chop grants you a non-exclusive, non-transferable, revocable license to access and use EHR-Africa, a cloud-hosted and offline-capable Progressive Web App for electronic health records, appointment scheduling, clinical documentation, prescription management, billing, and analytics.
You acknowledge that EHR-Africa is designed and operated in material compliance with:
Work Chop acts as your Business Associate (under HIPAA) and Data Processor (under NDPA/GDPR). A separate Business Associate Agreement (BAA) and Data Processing Addendum (DPA) are incorporated by reference and available at https://ehr-africa.com/legal.
You remain the owner and controller of all Protected Health Information (PHI) and personal data entered into EHR-Africa.
You are solely responsible for:
You must appoint at least one administrator and maintain up-to-date staff roles and access rights.
We implement administrative, physical, and technical safeguards meeting or exceeding HIPAA Security Rule requirements.
All data at rest is encrypted (AES-256). Data in transit uses TLS 1.3.
You agree to use strong passwords, enable two-factor authentication where offered, and not share login credentials.
Subscription plans and fees are published at /ehr-africa.netlify.app/manage-subscription.
Fees are payable monthly or annually in advance. Late payments may result in suspension after 14 days' notice.
We target 99.5% monthly uptime excluding scheduled maintenance. Support is provided via email and in-app chat during West African business hours.
Either party may terminate with 30 days written notice.
Upon termination, you may export all your data in standard formats (CSV, PDF, FHIR where available) within 60 days at no extra charge. After 60 days, data may be permanently deleted.
To the maximum extent permitted by law, Work Chop's total liability shall not exceed the fees paid by you in the 12 months preceding any claim. We are not liable for clinical decisions or outcomes.
This Agreement is governed by the laws of the State of California, USA. Any dispute shall first be submitted to mediation in San Diego, CA. If unresolved, disputes will be resolved by binding arbitration under AAA rules.
This document, together with the Business Associate Agreement, Data Processing Addendum, and current Pricing page, constitutes the entire agreement between the parties.
By proceeding, you confirm that you have the authority to bind your medical practice and that you accept these terms on behalf of yourself and all authorized users in your organization.
Under the Health Insurance Portability and Accountability Act (HIPAA)
This Business Associate Agreement ("BAA") is entered into as of the date You accept the EHR-Africa Service Subscription and Data Processing Agreement ("Main Agreement") between:
Work Chop Inc.
(a California corporation with principal office in San Diego, CA, USA)
("Business Associate" or "Work Chop")
and
You / Your Clinic / Your Practice
("Covered Entity")
collectively referred to as the "Parties".
Covered Entity is a healthcare provider subject to HIPAA and wishes to use EHR-Africa, a cloud-based electronic health record and practice management system operated by Work Chop.
Work Chop will receive, create, maintain, transmit, or otherwise have access to Protected Health Information (PHI) on behalf of Covered Entity.
The Parties enter into this BAA to comply with 45 C.F.R. §§ 164.502(e) and 164.504(e) and to satisfy the Business Associate contract requirements of HIPAA.
NOW, THEREFORE, the Parties agree as follows:
Terms used but not defined herein shall have the meaning given in the HIPAA Rules (45 C.F.R. Parts 160 and 164).
Business Associate may use or disclose PHI only as necessary to perform the services set forth in the Main Agreement or as Required by Law.
Business Associate may use PHI for its proper management and administration and to fulfill legal responsibilities.
Business Associate agrees to:
Covered Entity shall:
This BAA commences on the date Covered Entity accepts the Main Agreement and continues until terminated.
Covered Entity may terminate this BAA and the Main Agreement immediately if Business Associate has breached a material term and fails to cure within 30 days of notice.
Upon termination, Business Associate shall return or destroy all PHI. If return or destruction is infeasible, protections continue until PHI is returned or destroyed.
All PHI remains the property of Covered Entity. Upon request or termination, Business Associate will provide PHI in a mutually agreed standard format (CSV, PDF, or FHIR where available) at no additional charge.
Each Party shall indemnify the other against losses arising from its breach of this BAA or willful violation of HIPAA.
This BAA is governed by the laws of the State of California and federal HIPAA law.
Amendment: This BAA will be deemed amended to comply with changes in HIPAA or other applicable law.
Survival: Obligations regarding PHI survive termination.
the Parties accept this BAA electronically by Covered Entity's acceptance of the EHR-Africa Service Subscription and Data Processing Agreement.
Work Chop Inc.
Signature (electronic): Accepted via platform
Date: 18 November 2025
Covered Entity
By clicking "I Accept" or using EHR-Africa, you represent that you have authority to bind the Covered Entity to this BAA.
Date of Acceptance: [Automatically recorded]