We are planning to develop a EHR/Billing Software and we are aware about HIPAA rules and regulations. Our current application architecture using a shared database with all client's(Provider/Practice) data. I would like to know if HIPAA recommends in isolating database per client(Provider/Practice) - ie is a single database for every client a security breach of HIPAA rules and regulations?