We've appointed a Chief Security Officer within our startup that oversees security and HIPAA compliance. We work with Vanta (W18) to ensure compliance (they have automation software and compliance dashboards) and have a third-party auditor as well. I am happy to have our engineering team to tell you more if you wanted to learn! Feel free to message [email protected]