Aptible (YC S14) Handles the Hard Parts of HIPAA Compliance

Any plans to support Windows stacks?

That depends on what you mean. Few of the implementation steps are difficult on their own. The difficulty is more in the number of requirements, their complexity, the judgment calls involved, and keeping track of it all.

it is easy to assert you are hipaa compliant, but more work to actually demonstrate.

most requirements overlap with PCI (having built both banking and healthcare systems, PCI is much more demanding if still superficial)

the hardest part is paperwork and staff procedures

the most expensive part, amd i am not sure if this solution addresses this, is every single hospital customer i have insists on a totally independent 3rd part audit. what that entails is totally arbitrary but it costs ~25-50k per year. they would not, for example, take the internal audit of the vendor providng hipaa compliance as sufficient. however, if the vendor also provided an audit by an external party, i suspect that would work

be sure this or any other vendor is willing to sign a BAA with you specific to each customer