Yes, we take data and infrastructure security very seriously. We believe that its better to be safe than sorry. Our servers have multiple layers of security for added protection. Our servers are located in highly secure data centers within the US that are protected by 24-hour surveillance. And, yes, our solutions are HIPAA compliant.