An entity that handles protected health information (PHI) on behalf of a healthcare provider or organization.