Box has stated that it enables HIPAA compliance.
Just so you know
Box appears to check all the boxes for HIPAA compliance. It ensures documents containing sensitive information and PHI are safely stored in the cloud by using numerous security features, including access monitoring, two-factor verification, reporting and audit trails, and data encryption.
Box also provides access control, uses a strict logical system, and restricts access to its servers and customer data files.