Our On Demand services are not currently Health Insurance Portability and Accountability Act (HIPAA) certified/compliant. The bulk of our customers do not need this certification so we have not pursued it. If HIPAA certification/compliance is an issue that keeps your organization from using FogBugz or Kiln On Demand, please let us know. While we are not HIPAA certified/compliant, we take security and privacy very seriously and build great products with security in mind.