I once worked for a bank that offered lockbox services. I was not directly involved in it, but I do remember that we were required to have an agreement on file with them. Also, we had to provide extra HIPAA training to those employees, because they handled accounts for medical offices.
_________________________
Newbie Mgr