Co-location is easy. The hard part will be HIPAA compliance.

>Hi all,
>
>I'm looking for hosting for a .net application that's likely to be bandwidth and storage-intensive.
>
>It's a database of medical records where copies of the records (scanned, stored in pdf format) are available to end-users (my client's clients).
>
>Currently we're at 20GB of images (24,000 pdf's), and about 5GB of sql-server database and application. For security reasons (hipaa, sarbanes, homeland security, nsa, younameit), there's one computer running the app, another the database, and a third one hosts the images.
>
>Right now they're adding between 500MB and 1GB worth of pdf's every WEEK (between 300 and 500 pdf's).
>
>We are looking for a host that ties the fees only to storage and not to bandwidth as we have no way of predicting what the end-users' demand will be.
>
>I have a feeling this will be a co-location deal as I believe my client has his own hardware sitting at his current hosting provider.
>
>Thanks for any ideas!
>
>alex