HIPAA

HIPAA sets the standard for protecting sensitive patient health information in the United States. SaaS platforms handling PHI must sign Business Associate Agreements and ensure encryption, access controls, and audit logging are contractually enforced.