You might want to take a look our service, Interfax, an API-powered internet fax service provider, which addresses HIPAA and offers BAA's.
In fact, we cover a range of regulatory/standard requirements such as PCI-DSS (Tier 1) and EU GDPR.
We're now also looking at the Oz equivalent of these types of legislation.