Question: is pptp vpn hipaa compliant?
Answer: I would not recommend running any encryption bit length shorter than 256-bit or even 512-bit in the current Internet environment. They are actually one of the requirements in HIPAA and PCI compliance. Therefor, unless all other options are exhausted, I would avoid using PPTP.