Generate a HIPAA-compliant Business Associate Agreement for any vendor that handles patient data on your behalf.