Blog

Client-Level Isolation: Why Healthcare Hosting Cannot Treat Every Customer Like a Tenant

Most hosting puts many customers on shared systems and calls logical walls enough. Healthcare workloads carry a different risk: blast radius. What client-level isolation actually covers, why HIPAA does not require a dedicated server, and the eight questions that show whether a provider has real walls or a brochure.

Joseph Abear · Aug 2, 2026

Is WordPress HIPAA Compliant? The Real 2026 Answer

WordPress the software can run a fully HIPAA compliant site. WordPress.com the service offers no BAA at any price, and neither does WordPress VIP. The whole question collapses into where the site is hosted. The .org vs .com split, the verdict table, and the setup, verified July 2026.

Joseph Abear · Jul 31, 2026

Microsoft 365 HIPAA Compliance: The BAA and Setup for 2026

Microsoft folds its BAA into the standard terms of every commercial Microsoft 365 plan. No signing step, no add-on fee. The real work is knowing which apps are covered, what Copilot can and cannot touch, and the settings that turn the contract into compliance. The full map, verified July 2026.

Joseph Abear · Jul 30, 2026

HIPAA Compliant Texting: Rules, Consent, and Apps (2026)

Practices text patients every day, lawfully. HIPAA compliant texting comes down to three lanes: lean appointment reminders, plain SMS a patient chose after a risk warning, and secure messaging apps with a BAA for clinical content. Here are the rules, the consent steps, and the apps, verified July 2026.

Joseph Abear · Jul 29, 2026

HIPAA Compliant Video Recording: Consent, Storage, Rules

The platform's BAA covered the live call. The recording is a new object with its own rules. HIPAA compliant video recording takes three steps: the right consent stack before you press record, BAA-covered storage for the file, and a retention schedule that matches state law. Here is the full map, verified July 2026.

Joseph Abear · Jul 28, 2026

HIPAA Compliant WordPress Forms: Plugins and Setup (2026)

Most guides say WordPress form plugins are not HIPAA compliant because they sign no BAA. The truth is sharper: self-hosted plugins never see your data, so your host signs the BAA, not the plugin. Here is how HIPAA compliant WordPress forms actually work, the Gravity Forms and Contact Form 7 verdicts, and the setup checklist.

Joseph Abear · Jul 27, 2026

HIPAA Compliant Email: Gmail, Outlook, and the BAA (2026)

Every guide ranking for HIPAA compliant email sells an email product. We do not, so here is the straight answer: the suite you already pay for can often qualify. When Gmail and Outlook carry PHI lawfully, when a dedicated vendor earns its fee, and the patient opt-out right the encryption vendors rarely mention.

Joseph Abear · Jul 24, 2026

AWS HIPAA Eligible Services: RDS, S3, Lambda, Bedrock 2026

Teams ask the same three questions: is RDS eligible, is Lambda eligible, is Bedrock eligible? Yes, yes, and yes, with footnotes. This guide explains how to read the AWS HIPAA eligible services list, which building blocks qualify as of July 2026, and what you still configure before PHI arrives.

Joseph Abear · Jul 23, 2026

Is Google Drive HIPAA Compliant? The 2026 BAA Answer

Practices store everything in Drive, so is Google Drive HIPAA compliant? Only inside a paid Google Workspace plan with the BAA accepted and sharing locked down. A free personal Drive can never hold patient files. Here is the account-by-account answer and the settings that decide it.

Joseph Abear · Jul 22, 2026

HIPAA Compliant Video Conferencing: Who Signs a BAA in 2026

Most video conferencing roundups list features. HIPAA compliant video conferencing comes down to one question first: will the platform sign a BAA? Here is the verified 2026 answer for Zoom, Doxy.me, Google Meet, Microsoft Teams, and Webex, the platforms that never qualify, and the setup work after the contract.

Joseph Abear · Jul 21, 2026

Is WP Engine HIPAA Compliant? The BAA Answer for 2026

Practices love WP Engine, so is WP Engine HIPAA compliant? No. Its published terms offer no Business Associate Agreement, and without a BAA no patient data can lawfully live there. Here is what its terms say, when WP Engine is still fine to use, and the two setups that work.

Joseph Abear · Jul 20, 2026

Is Zoom HIPAA Compliant? Plans, the BAA, and HIPAA Mode in 2026

Every telehealth practice asks it: is Zoom HIPAA compliant? Yes, with conditions. Zoom signs a BAA on qualifying paid plans, but only on request, and HIPAA mode must be enabled. Free and standard accounts are never covered. Here is the plan-by-plan answer and the setup that works.

Joseph Abear · Jul 16, 2026