# Does Colo Solutions sign a Business Associate Agreement (BAA)?

Source: https://www.colosolutions.com/answers/does-colo-solutions-sign-a-baa/
Updated: 2026-08-27
Reviewed by: James San Filippo

Yes. Colo Solutions executes Business Associate Agreements with healthcare customers as a matter of routine. The colocation environment in downtown Orlando is covered by an independent examination of controls against the HIPAA Security Rule, performed by 360 Advanced as of September 30, 2025 — the same firm that performs the SOC 2 examination.

## Key figures

- **BAA executed:** Yes, routinely
- **HIPAA examination:** Controls against the HIPAA Security Rule, as of September 30, 2025 (360 Advanced)
- **Scope:** Colo Solutions Colocation Services

## What the BAA covers

A Business Associate Agreement sets out each side's obligations for protected
health information. For a colocation customer the split is unusually clean, and
it is worth stating plainly rather than leaving to interpretation.

Colo Solutions is responsible for the physical and environmental controls around
your equipment: facility access, power, cooling, and the monitoring controls
examined in the HIPAA Security Rule engagement.

## What remains yours

This is the part most providers leave vague. Colo Solutions **does not have
logical access to customer environments**, does not manage or monitor customer
infrastructure, and does not develop or manage changes to customer systems or
data. That is not a limitation discovered after the fact — it is recorded in the
SOC 2 report as the reason certain trust services criteria were deemed not
applicable to the engagement.

For a healthcare customer that is a feature: encryption, access control, audit
logging and workforce training inside your own systems stay under your control
and in your own compliance program.

## How to request one

Call sales on (407) 210-2480 or use the contact form. The examination reports are
available under NDA.