3 ms·

Thanks for the TrueVault pointer, that's a great resource for info! I was going to followup asking your thoughts on using their service vs doing it yourself, bu

Thanks for the TrueVault pointer, that's a great resource for info! I was going to followup asking your thoughts on using their service vs doing it yourself, but reading the dev guide posted by @jameslk I came across this: We think this comment from Hacker News sums up the technical debt required to roll your own HIPAA compliant infrastructure quite accurately. This was completely unsolicited and is not from a TrueVault customer. "[Building our own HIPAA compliant infrastructure] took upwards of 1,000 person-hours to figure out HIPAA-compliance issues. This will continue to be an ongoing cost for us, because HIPAA is an ongoing law and it changes sometimes. It takes substantial auditing time and money." — jph

saluki 8y ago
y, I don't think it's practical to DIY. Although Patio11 did it with AppointmentReminder it sounds like basically their HIPAA plans were ran the same as their regular plans as far as servers/security. From what I read he just offered the agreement, etc to the higher paying customers. There are lots of interesting apps that could benefit patients and doctors. HIPAA is just scary to tackle as a small company, it's way easier just to choose another niche. People always say selling to the medical field is difficult too.