Have you tried to go through this process? Amazon seems to have done a good deal of work to ensure its servers and practices are HIPAA-compliant: http://aws.ama

Have you tried to go through this process? Amazon seems to have done a good deal of work to ensure its servers and practices are HIPAA-compliant: http://aws.amazon.com/about-aws/whats-new/2009/04/06/whitepaper-hipaa/ http://aws.amazon.com/about-aws/whats-new/2009/04/06/whitepa... I think, as you allude, that the primary issue is not technical but behavioral. In the area of healthcare I work in (nursing homes), quite a few organizations have their data hosted elsewhere. Sometimes it's through the vendor, sometimes it's with a third-party service. I don't see that big a leap of faith to Amazon from this.