0

We are a non-profit mental health organization and require our records to be secure.

1

There was quite a discussion about this here which is worth your perusing. It suggests that the question won't be 'is civicrm HIPPA compliant' but 'is my configuration and usage of civicrm HIPPA compliant'.

1

And in addition to what Pete wrote - you will want to ensure your server configuration/firewall/SSL etc is all set up securely too - and locked down such that only very few hands have access to your codebase.

Not the answer you're looking for? Browse other questions tagged or ask your own question.