Does Colo Solutions sign a Business Associate Agreement (BAA)?
Yes. Colo Solutions executes Business Associate Agreements with healthcare customers as a matter of routine. The colocation environment in downtown Orlando is covered by an independent examination of controls against the HIPAA Security Rule, performed by 360 Advanced as of September 30, 2025 — the same firm that performs the SOC 2 examination.
| BAA executed | Yes, routinely |
|---|---|
| HIPAA examination | Controls against the HIPAA Security Rule, as of September 30, 2025 — 360 Advanced |
| Scope | Colo Solutions Colocation Services |
What the BAA covers
A Business Associate Agreement sets out each side’s obligations for protected health information. For a colocation customer the split is unusually clean, and it is worth stating plainly rather than leaving to interpretation.
Colo Solutions is responsible for the physical and environmental controls around your equipment: facility access, power, cooling, and the monitoring controls examined in the HIPAA Security Rule engagement.
What remains yours
This is the part most providers leave vague. Colo Solutions does not have logical access to customer environments, does not manage or monitor customer infrastructure, and does not develop or manage changes to customer systems or data. That is not a limitation discovered after the fact — it is recorded in the SOC 2 report as the reason certain trust services criteria were deemed not applicable to the engagement.
For a healthcare customer that is a feature: encryption, access control, audit logging and workforce training inside your own systems stay under your control and in your own compliance program.
How to request one
Call sales on (407) 210-2480 or use the contact form. The examination reports are available under NDA.