Official HIPAA and PCI compliance must be certified by a recognised independent company or organisation.  Compliance arises from assessment against a range of guidance factors, which are non-specific. A BYOD secure end-point environment is a significant factor to enable compliance certification, particularly if the specific profile rules applied to your agent’s SRW profile are highly restrictive. Your organisation’s own internal processes to interact with your BruntWork agent are also relevant in determining compliance, and use of SRW itself is not necessarily determinative of HIPAA or PCI compliance.