At the moment, we are not HIPAA compliant. However, Rocketbook does not store any of your notes on our own servers unless you use some optional Optical Character Recognition (OCR) features. Your notes are either on your own device or the cloud service you have sent your notes to. When you send your scans via email, we pass the image file and metadata through an email service provider called Sendgrid to assemble the email. But even there, notes are not stored as they just pass through.