>>We're in the last phases of an evaluation of IT options for a health-related agency.
>>
>>We are recommending a system of web applications using ASP.NET/SQL2008 (choking on MS licensing, but it still makes most sense in this case) for their main operations.
>>
>>They have a central office where a little over half of their staff works, but the remainder work from small remote offices or from laptops on the road.
>>
>>Our initial thoughts are to have them host their applications on their own servers where they have complete control and can provide redundant internet connectivity. Even if they lose connectivity, their office can still function. Obviously they will be responsible for their own data security.
>>
>>I've contracted for 3 companies that dealt with medical data and all worked this way.
>>
>>I'm looking for opinions and recommendations on 3rd party hosting of web apps with HIPAA data.
>>
>>The idea of medical data (lots of it) being offsite worries me, as well as the idea of all users being down if the hosting site is down or offline.
>>
>>Thoughts?
>
>I know of one group practice using allegiance. You might contact them and see how they handle it:
>
>http://www.allegiancemd.com
>
>I think advanced md is similar:
>
>http://www.advancedmd.com

I'll take a look.

Thanks!