Your obligations include ensuring only authorized users access Caily, deactivating accounts promptly upon staff departure, notifying Caily of known security incidents, and complying with applicable HIPAA requirements. Review your executed BAA for the complete terms.