In our cloud service, we apply industry standard security measures to ensure the security of our customer’s data. However, our data center does not have 3rd party certifications like HIPAA. SpreadsheetWeb runs on Windows servers and Microsoft SQL database. All customer data is stored in SQL database. If you are planning to collect sensitive information such as patient data, it is governed by HIPAA regulations. Hence, we cannot host this type of data on our cloud environment.
To keep this type of sensitive data, we recommend hosting SpreadsheetWeb on your own servers. You can also host SpreadsheetWeb on a HIPAA certified cloud service like Azure.