Do you handle HIPAA compliance?

We build HIPAA-aware code from commit one. That means BAA-signed infrastructure (AWS, Vercel Enterprise, Supabase Pro all sign BAAs), encrypted PHI at rest and in transit, audit logs on every PHI read and write, and access controls scoped to the minimum necessary. We do not provide your HIPAA compliance program itself — you need a compliance officer and policies — but we make sure the code does not break it.