Sorry I didn't see this earlier. We are actually working on making HIPAA compliance easy in the cloud by providing a platform where developers can easily encrypt/track/audit their data and establish compliance to auditors. We plan to do this using a custom-built stack + a centralized management console. Do you have any feedback on something like this, or would it be okay if I could contact you offline? My email is in my profile. Thanks