Microsoft 365 can be configured to support HIPAA compliance, but out of the box it is not. A Business Associate Agreement (BAA) must be signed with Microsoft, and specific security settings must be enabled and maintained. We handle this as part of your managed environment.
