# Request a DPA or HIPAA BAA

Published by Stima AI, LLC. — part of the [Apertis Trust Center](/trust).

Requests are submitted through the form at [/trust/dpa](/trust/dpa); a countersigned agreement follows within 1-2 business days. This document describes that form and is not a second way to submit one.

## What you are requesting

**Data Processing Agreement (DPA)** — Covers processing of personal data under GDPR, UK GDPR, Swiss FADP, and CCPA. Stima AI, LLC. acts as the data processor; the customer is the data controller. Suitable for enterprise customers of the Apertis platform.

**HIPAA Business Associate Agreement (BAA)** — Required only for customers using *Apertis Verbatim* to process Protected Health Information (PHI). Stima AI, LLC. acts as the Business Associate per 45 CFR §160.103. Stima AI, LLC. has executed upstream BAAs with Google Cloud Platform, Google Workspace, and Amazon Web Services (all signed 2026-05-19) so that infrastructure subprocessors handling Verbatim PHI are HIPAA-eligible services covered by their own BAAs.

Both agreements are available on request to qualified counterparties. Outbound BAA templates undergo lawyer review before execution and may take longer than 1-2 business days for complex amendments.

## Your request

Request type — choose one:

- DPA only (GDPR / general data processing)
- HIPAA BAA only (Verbatim — PHI processing)
- Both DPA and HIPAA BAA

Required: your name, company, work email.
Optional: role, region or country, additional notes.

## Contact

Security, DPA and data subject access requests reach a human at:

[hi@apertis.ai](mailto:hi@apertis.ai)

Phone: +1 814-731-3793