Roupen I dug in a little bit here. Setting up HIPAA compliant infra stack is feasible, but high-effort. I don't see this as something likely in the near-term unless there is an easy-to-setup platform as a service that I don't know about (very possible). This is something we'd want to do eventually, but it's such a big project that I don't think we can give a timeline at this point without more investigation and expertise.
If you know of any drop-in, easy-to-setup solutions for HIPAA compliance, pls share! I'd love to be able to do this.