organizations that perform functions involving protected health information (PHI) on behalf of covered entities. VitraMed, as an EHR provider, is a business associate to the clinics it serves.