Dropbox has stated that it enables HIPAA compliance. It also offers access control, allowing only authorized personnel to access ePHI, along with activity logs and audit controls to track PHI.
Users can limit who accesses protected health information (PHI) and monitor how PHI is used. Dropbox also provides recommendations upon request for users looking to make their business accounts HIPAA friendly.