Resources
Guides, comparisons, research and more from the Yesmark team.
- ArticleCCPA service provider vs contractor vs third party: what decides the roleFor founders and RevOps leads at data, API and media vendors asked which CCPA role they play: the three definitions, the contract each needs, and the advertising limit that turns a vendor into a third party.7 min read
- ArticleIs an email agreement legally binding? When a client's "I agree" holds upFor ops leads at services companies who email standard terms and collect "agreed" replies: what US law says, where courts found email wasn't enough, and the four ways it breaks for terms sent to many clients.6 min read
- ArticleMSP client onboarding checklist: terms before accessFor MSP owners and service managers standardizing onboarding: a five-phase checklist that starts with the step most skip, getting the service terms, NDA and BAA accepted before admin access.5 min read
- ArticleThe HHS sample business associate agreement, section by sectionFor healthcare MSPs and vendors starting a standard BAA from the HHS sample: what each section implements, the bracketed choices it leaves open, and what it doesn't cover.7 min read
- ArticleHow to get existing clients to accept your updated termsFor ops leads and founders at B2B services companies moving every client to a new MSA or service terms: why notice isn't acceptance, a rollout that holds up, and how to track who agreed to which version.7 min read
- ArticleSub-processor change notices under US privacy lawsFor ops and security leads at data vendors and agencies adding a vendor that touches client data: what California, Colorado and Virginia say about telling clients, and how to keep a record that you did.7 min read
- ArticleWhat US state privacy laws require in a processor contractFor media agencies, analytics shops and other vendors handed a client's DPA: what California, Colorado and Virginia require the contract to contain, and what is one client's preference.7 min read
- ComparisonClickwrap vs e-signature for the terms you send every clientFor ops leads at services companies who send the same NDA, DPA or service terms to dozens of clients: which documents belong in an e-signature envelope, which belong behind an accept link, and why.7 min read
- GuideUS state privacy laws: processor contract requirements by stateFifteen US state privacy statutes, one row each: what a processor or service-provider contract must contain, every row checked against the statute text and dated.9 min read
- ArticleCan a BAA be accepted with a click? What HIPAA actually requiresFor healthcare MSPs and billing companies sending the same BAA to every client: what HIPAA and the ESIGN Act say about electronic acceptance, and how AWS and Google do it.8 min read