HIPAA compliant?

[Aaronb160]

I have a client that uses a service called klara with an older on premise analog phone system. It’s a chat/file sharing service that she also uses for business SMS. She wants to go with 3CX, however she wants to know if the chat feature is HIPAA compliant like klara. She works in the medical field and will be sharing personal/medical files.

 

[NickD_3CX]

I believe that HIPAA requires that Chat messages, when being sent and where they are being stored, that they are encrypted.

The communication channel 3CX uses is HTTPS so this communication is encrypted, but the messages are stored in clear text in the Database, so if I am correct and this is a requirements, the answer would be no.