Amazon S3 is one of the most secure HIPAA cloud storage solutions out there. They have strict access controls in place, and encrypt all data at rest and in transit. They also provide the option to enable 2-factor authentication for an extra layer of protection.