Yes, Host Merchant Services operates to PCI DSS Level 1 standards, and our healthcare solution leverages Practice Management Bridge, which includes HIPAA/OSHA compliance features. (Your practice remains responsible for HIPAA compliance overall and may need BAAs with relevant vendors.)