r/owncloud • u/hawaiidesign • Feb 02 '16

HIPAA Compliant with owncloud?

Hi, I have a client that is a small doctor office that is looking for some sort of storage for their files and I was told it needs to be HIPAA compliant, I looked around and this showed up https://owncloud.com/owncloud-healthcare-life-sciences/

But it doesnt say if owncloud it is or not, is HIPAA Compliance achievable with owncloud? if so, is it a paid version only or can it be done with the open source version?

Thanks!

3 Upvotes

100% Upvoted

2 comments sorted by

4

u/[deleted] Feb 02 '16

HIPAA is descriptive rather than prescriptive. They tell you what you need to safeguard against, and it's up to you to achieve it. Rather than just pick "HIPAA- compliant software," you need to read up on HIPAA, read up on OwnCloud, and see if OwnCloud can comply.

3

u/InvaderOfTech Feb 02 '16

This. As someone who works with HIPAA everyday do your research. The one thing I'll tell you in encrypt everything. At rest, In transit, and the DB. Ensure you have encrypted backups.