HIPAA is more about documenting your intended process, and your actual actions, than it is about requiring any particular solutions provider. For example, it's entirely possible to build a HIPAA compliant web app on AWS:

http://aws.typepad.com/aws/2009/04/white-paper-creating-hipa...

My company is in the middle of this, and we haven't encountered any deal-breakers so far.