Yes. We sign a Business Associate Agreement and operate as a compliant partner, with encryption of PHI in transit and at rest, detailed audit logging, access controls, and documented backup and disaster recovery. Because your provider clients audit you, we help you produce the evidence and controls they expect during their reviews.