Yes, we sell Comprehend Clinical as a deployable Enterprise Java application that our customers install in house.

Besides just HIPAA, the clinical industry also has to comply with Title 21 CFR Part 11 (http://en.wikipedia.org/wiki/Title_21_CFR_Part_11). There is a lot of discussion about how to take advantage of cloud computing while remaining compliant, but as of yet there's no definitive answer.