HIPAA 项目
你可以使用 Supabase 来存储和处理受保护的健康信息（PHI）。如果你想在 Supabase 上开始开发医疗应用，可以通过 这里 联系 Supabase 团队签署业务合作协议 (BAA)。
🌐 You can use Supabase to store and process Protected Health Information (PHI). If you want to start developing healthcare apps on Supabase, reach out to the Supabase team here to sign the Business Associate Agreement (BAA).
在处理个人健康信息（PHI）时，组织必须与 Supabase 签署 BAA，并启用健康保险携带与责任法案（HIPAA）附加功能。
🌐 Organizations must have a signed BAA with Supabase and have the Health Insurance Portability and Accountability Act (HIPAA) add-on enabled when dealing with PHI.
配置一个 HIPAA 项目 #
🌐 Configuring a HIPAA project
当一个组织启用了 HIPAA 附加功能时，该组织内的项目可以被配置为 高合规性。这个配置可以在仪表板的 项目常规设置页面 找到。启用后，系统会对项目进行额外的安全检查，以确保部署的配置符合规范。这些检查会持续进行，如果发现不合规的设置，安全警告会出现在 安全顾问 中。
🌐 When the HIPAA add-on is enabled on an organization, projects within the organization can be configured as High Compliance. This configuration can be found in the General Project Settings page of the dashboard. Once enabled, additional security checks will be run against the project to ensure the deployed configuration is compliant. These checks are performed on a continual basis and security warnings will appear in the Security Advisor if a non-compliant setting is detected.
管理医疗数据所需的项目配置已在《共享责任模型》中概述。
🌐 The required project configuration is outlined in the shared responsibility model for managing healthcare data.
这些包括：
🌐 These include:
- 启用 时间点恢复 需要至少一个 小型计算附加组件。
- 开启 SSL 强制。
- 启用网络限制。
- 保持启用 Postgres 连接日志记录。
随着安全顾问的扩展和更多安全控制的可用，会增加额外的安全检查和控制。
🌐 Additional security checks and controls will be added as the security advisor is extended and additional security controls are made available.