3 ms·

HIPAA is more about documenting your intended process, and your actual actions, than it is about requiring any particular solutions provider. For example, it's

HIPAA is more about documenting your intended process, and your actual actions, than it is about requiring any particular solutions provider. For example, it's entirely possible to build a HIPAA compliant web app on AWS: http://aws.typepad.com/aws/2009/04/white-paper-creating-hipaacompliant-medical-data-applications-with-amazon-web-services.html http://aws.typepad.com/aws/2009/04/white-paper-creating-hipa... My company is in the middle of this, and we haven't encountered any deal-breakers so far.

Kadrith 16y ago
A system built from scratch can meet HIPAA, and HITECH, without much more than good security. The issue is often with companies that give security an afterthought or have older software that needs to be "made secure." The key to that link is encryption; it gets Amazon off the hook for a lot of things.