[nradov]

Direct Project secure messaging can be fully HIPAA compliant when properly implemented. Multiple vendors offer that service; it's an open standard and not a walled garden.

http://wiki.directproject.org/Main_Page