Does Laserfiche Cloud have a Business Associate Agreement in place for hosting PHI in relation to HIPAA?  I know self hosted Laserfiche isn't HIPAA compliant out of the box, but can be configured to help an organization achieve HIPAA compliance through security/auditing configuration.  With the fact that Laserfiche Cloud hosts the data, its my understanding that a BAA would need to be in place by the host in order for the Cloud provider to be able to offer HIPAA compliance.  Can someone confirm?