如何为安全消息传递前端和HIPAA兼容数据库选择解决方案？

I am interesting a setting up a small business website, the front-end of which will be a customer portal (secure messaging center) with perhaps the ability to upload images. E-commerce capability will be needed, using Paypal and CC (US only). The back-end will be a database and the whole system will need to be HIPAA compliant. I am interesting a setting up a small business