HIPAA Compliant Hosting

[JoshuaMackens]

Looking for a good hosting company that has HIPAA compliant hosting.

Any recommendations?

 

[djbaxter]

13 Best HIPAA-Compliant Hosting Services (2020): Cloud & Servers - HostingAdvice.com

Remember playing Operation? The high-stakes, hand-wringing, pressure-packed game of hand-eye coordination has players trembling as they concentrate on removing Calamity Sam’s various ailments without being shot into the ceiling with surprise when the buzzer inevitably sounds. But real-life...

www.hostingadvice.com

HIPAA Compliant Hosting Providers - HIPAA HQ

If you are a covered entity according to the HIPAA laws and you want to run a HIPAA compliant website or application, you will be needing HIPAA compliant hosting. Please be sure you have read this full in-depth article first: HIPAA Compliant Hosting Explained. On this page you will find the...

www.hipaahq.com

 

[JoshuaMackens]

Thanks @djbaxter!

Does anyone have any specific experience with a HIPAA compliant host?

 

[Tim Colling]

I have a client who uses a specialized email service provider for HIPAA compliant email, but no, I don't have experience with "HIPAA-compliant website hosting" per se.

We have, however, built a HIPAA-compliant patient referral system for one client. In that case, we used a third party that provides a way to do that by using Gravity Forms and the third party's add on WordPress plugin with the information being stored on their own secure server.

 

[Lorthemar]

Hey Joshua,
I'm a little late to the party. A HIPAA compliant hosting service is mandatory to ensure HIPAA compliance but just using one on its own does not guarantee compliance. Usually, you also have to sign a BAA with the company after you're absolutely sure that PHI is encrypted and protected.

I haven't set up any websites on a HIPAA compliant hosting service on my own, but I found this article, maybe it will help! 6 Best HIPAA Compliant Hosting Services

@Tim Colling Did you sign anything with the third party? Are you sure that it's encrypted, because I seen a couple of agencies run into issues with third-parties. No big penalties yet.

 

[Tim Colling]

I mentioned two clients in my earlier comment.

The one that was using a HIPAA-compliant email vendor has stopped working with that vendor and switched to Office365 at the suggestion of their IT support firm, which happens to also be an Office365 consulting firm. That's all I know about that situation.

The other client, for whom we built the HIPAA-compliant referral form solution, does have an agreement with the vendor for the underlying plugin solution.