KoBoToolbox uses Amazon Web Services, which by itself is not HIPAA compliant. However, you could contract a hosting company specialized in HIPAA and run KoBoToolbox on their servers. We know that using this level of security is very important to some users, but at the moment we don’t have plans (yet) to move to this level of security, which comes with a very substantial cost increase.
To learn more about hosting on AWS while being HIPAA and HITECH compliant, see here.
KoBoToolbox at the Harvard Humanitarian Initiative 14 Story St, Second floor, Cambridge, MA 02138