Business Associate Agreement

Effective date: July 13, 2026

GoodCare OS is a product of TGCH Technologies Corporation ("TGCH"). When a home care, home health, or pediatric private-duty nursing agency uses GoodCare OS to deliver care, TGCH acts as a Business Associate to that agency (the "Covered Entity") under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations.

1. We Sign a BAA With Every Covered-Entity Customer

Before a Covered Entity places protected health information (PHI) into the GoodCare OS platform, TGCH executes a written Business Associate Agreement (BAA). The BAA is a required part of onboarding for any customer that is a HIPAA Covered Entity or that acts as a Business Associate itself.

2. What the BAA Covers

Our BAA addresses the obligations required by the HIPAA Privacy and Security Rules, including that TGCH will:

• Use and disclose PHI only as permitted by the BAA or as required by law.
• Implement administrative, physical, and technical safeguards designed to protect the confidentiality, integrity, and availability of electronic PHI.
• Ensure that subcontractors that create, receive, maintain, or transmit PHI on our behalf agree to comparable restrictions and safeguards.
• Report security incidents and breaches of unsecured PHI to the Covered Entity as required by HIPAA.
• Make PHI available to support the Covered Entity's obligations regarding individual access and amendment.
• Return or destroy PHI, where feasible, upon termination of the agreement.

3. Requesting a BAA

Current and prospective customers can request a copy of our standard BAA, or submit their own for review, by contacting us at the address below. Our team will coordinate execution as part of your onboarding.

4. Related Policies

This page summarizes our approach and does not replace the executed BAA, which controls in the event of any conflict. See also our HIPAA Notice, Security overview, and Privacy Policy.

5. Contact