FirstMatch is HIPAA compliant and the data is considered to be Protected Health Information (PHI).  Organization’s control access to their data through a cloud based server that they own.