A Business Associate Agreement nothing to address the SOX requirements, which apply to more companies. "Google ate our documents" is not a defense to SOX filing and reporting requirements.