Comment Re:HIPAA yes... but SARBOX? (Score 1) 122
Small businesses that are third-party providers to publicly traded companies must comply with Sarbanes-Oxley as well.
In any problem, if you find yourself doing an infinite amount of work, the answer may be obtained by inspection.