I have a need for a HIPAA-compliant application solution and am curious to know if the entire Microsoft Power Platform along with the Dataverse are compliant by default. I'm aware Microsoft does a lot in terms of HIPAA compliance, but I wasn't sure how this applied to data being handled in solutions like the Dataverse or surfaced in Power Apps/Power Automate/Power BI.
Yes, I also know this has as much to do with my organization's handling of the data as it does with Microsoft; my main question is if Microsoft's Power Platform (and its supporting tools) are compliant insofar as they can be.
Anyone have any thoughts or experience here?
