Yes. Onpipeline (in the Advanced plan) meets the administrative, physical and technical safeguards as required by HIPAA. Onpipeline encrypts data stored on servers. Data transmission is done via HTTPS (Secure Sockets Layer). The business associate agreement (BAA) can obtained (please contact Support to obtain a BAA).