Being in the healthcare industry I am also very interested in this. I don’t know though if Dgraph can answer this though because they would have to fully comprehend what HIPAA entails which is a very large undertaking. Maybe secondary question to this would be looking at the self-host option and what that would take to meet compliance even without having a BAA.