Yes. We reduce your PCI-DSS scope by using tokenized, hosted payment flows so raw card data never touches your systems, and we monitor the dispensary and subscription billing for fraud and outages. Combined with HIPAA safeguards on the clinical side, your patients’ health and payment data stay protected under both frameworks.