Sumac supports all the technical requirements that enable an organization to be in compliance with the requirements of the HIPAA standard.
The basic things that Sumac does to comply with HIPAA are:
a. require passwords and user profiles that restrict visibility of the data to authorized users
b. encrypt connections between Sumac and the database
c. provide mechanisms for updating information in the database
d. log access to the information in the database
e. do all the above things securely (the security of these things that is required for Sumac's PA-DSS certification exceeds what the HIPAA standards require)