Thanks for the help, I appreciate it. > You basically need to fully commit to being HIPAA compliant if you go directly with a service. Do you mind explaining

Thanks for the help, I appreciate it. > You basically need to fully commit to being HIPAA compliant if you go directly with a service. Do you mind explaining that a little more? Are there specific actions that need to be taken in order to be HIPAA compliant if no data is being saved on the server?