Re:Ask HN: HIPAA Hosting?
by kls on Monday October 11, 2010 @03:11PM
(#1780833)
The first company that gets to a certified HIPAA and PCI hosting cloud is going to have to figure out what to do with the buckets of cash they have lying around. I think for the enterprise PCI certification will be the event that gets the big (non-tech) guys out of running their own infrastructure. I would imagine that it would be the same for medical. As for you immediate question, I am sorry I can't help I don't know who if anyone is doing this. I am still looking for a PCI certified cloud as a portion of my customers are Public companies and not having to work on all their different infrastructures and being able to provide them a hosted solution would be great for me, but there is no way I could get into managing a PCI certified hardware infrastructure just to achieve that goal.
[ Parent
| on HN ]
As a point of clarification... HIPPA is a federal law. PCI is an industry standard (VISA, Mastercard, etc). That does not mean one is better than the other, I just wanted to clarify.
Yes, I am aware of the difference but thanks for the clarification. My point was more to the fact that a specialized cloud provider could really fill a needed void here on both counts.
I agree it would be great, I've gotten letters from Amazon that it is hipaa compliant but not PCI, and from rackspace that it is pci compliant but not hipaa.