Supply Chain Management is here to provide assistance to WashU departments with procurement and purchasing needs that fulfill the university’s teaching, research and patient care missions. Get started on your purchasing journey with the following services and tools. 

NEW Contract Management Intake Tool

Supply Chain Management has launched a Contract Management tool to process contract requests and provide status updates during contract reviews.

Go to the Dashboard →

Supplier Selection Justification (SSJ)

The SSJ form is required for purchases of $10,000 or more when using sponsored funds, or for any non-preferred purchases exceeding $25,000.

Sales Tax Exemptions

Federal Tax ID #: 43-065-3611
Missouri ID #: 12623890
DUNS #: 06-855-2207

HIPAA & Business Associate Agreements

ANNOUNCEMENT:

Business Associate Agreements (BAA) are no longer managed by the HIPAA Privacy Office. BAA review is now handled by Supply Chain Management.

A BAA is a legal agreement between WashU and a vendor that helps protect the university if sensitive information is accessed, shared, or misused.

WashU requires a Business Associate Agreement (BAA) whenever protected health information(PHI) is shared with a vendor to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA). PHI includes specific personal and health-related information, such as the items listed here as HIPAA Identifiers.

Check for an Existing BAA

Review the HIPAA Business Associate Suppliers list in the WashU Contract Management Tool.

  • Executed BAAs generally apply University-wide
  • Multiple BAAs with the same vendor are typically not required
  • Exceptions will be noted on the list

Have questions about whether a BAA is required? Email supplychain@wustl.edu for guidance.

Submit a Contract Intake Form (If No BAA Exists)
Getting a “Validate BAA” Message

When processing a purchase order or SIR, you may receive a “Validate BAA” message if a patient-related spend category is used and the vendor is not listed as having a BAA on file. If you receive this message, confirm that no PHI is being shared. If PHI will be shared, you must work with the vendor to establish a BAA.

Supply Chain Management’s Role in BAAs
  • Coordinate with the requestor, vendor, and HIPAA Privacy Office
  • Draft and negotiate the BAA
  • Manage revisions and approvals
  • Obtain signatures from the vendor and an authorized University signatory

Once Executed:

  • A copy of the finalized BAA will be shared with the vendor and requester
  • The original agreement will be retained in the Supply Chain Management repository

Frequently Asked Questions

Look up our frequently asked questions in the University Services resource section.

Helpful Links