Box has stated that it is HIPAA compliant.
Just so you know
Safely collect patient data and payments with JotForm's HIPAA-compliant forms and send them to your Box account automatically.
Box appears to check all the boxes for HIPAA compliance. It ensures documents containing sensitive information and PHI are safely stored in the cloud by using numerous security features, including access monitoring, two-factor verification, reporting and audit trails, and data encryption.
Box also provides access control, uses a strict logical system, and restricts access to its servers and customer data files.
Box also provides access control, uses a strict logical system, and restricts access to its servers and customer data files.
