(Render CEO) We now offer a standard BAA for HIPAA compliance. Email support@render.com to get started.
Thanks for the response, anurag! Is that usually the most that your customers passing PHI through Render will ask for? Or are there a few other steps they have to take in order to feel like their compliance requirements are met by the platform?
It depends on the customer, but the BAA is the most we've been asked for so far outside of our regular security practices.
That's good to know, appreciate you sharing that.
You might check out https://www.aptible.com/. It's not quite as ridiculously simple as Heroku but they are HIPAA compliant.