We are a non-profit mental health organization and require our records to be secure.


There was quite a discussion about this here which is worth your perusing. It suggests that the question won't be 'is civicrm HIPPA compliant' but 'is my configuration and usage of civicrm HIPPA compliant'.


And in addition to what Pete wrote - you will want to ensure your server configuration/firewall/SSL etc is all set up securely too - and locked down such that only very few hands have access to your codebase.

Not the answer you're looking for? Browse other questions tagged or ask your own question.