Bumping this topic since it’s been close to a year. Does anyone have any updated information about building a HIPAA compliant solution on Bubble, with or without a separate HIPAA compliant 3rd party vendor? Has anyone been successful building a HIPAA compliant solution using bubble? Thanks for help!
For some context, we are building a mobile platform for medical triage, that will require storing PHI. I do not believe we will be able to de-identify data since it needs to be identified data in real time to provide the live triage component. Initially, we were going to build it ourselves and deploy on top of Aptible, which is a 3rd party HIPAA compliant data solution, but since we have lost our developer due to poor fit. Now, as we search for a new developer, I’m wondering if it’s possible to use Bubble to build a front end, with data encryption, and deploy on top of someone like DataVault, or Aptible. The other option would be to build a very basic prototype version that only allows communication with a nurse, but no actual data transfer.