Salesforce can be HIPAA-compliant, but you’ll need to speak with your account representative and execute a Business Associate Agreement (BAA). Salesforce can be linked to “Shield” premium services for enhanced monitoring, encryption, and auditing.