Enterprise organizations processing health data needs an HIPAA BAA with the service provider/data processor. We're currently working towards this, among other compliance-related standards such as SOC, but we can't offer a concrete timeline for when it will happen yet.

If your organization is interested, please upvote this thread and/or leave your feedback below!