I hope you point out to your customers that compliance is a lot more than just a hosting account. Everything from specifications of the design of your office network to policies for employees talking while on smoke breaks.
https://catalyze.io/hipaa/ https://catalyze.io/policy/
And we've gone through a HITRUST audit to validate these claims: