Consider signing a HIPPA BAA with Rollbar

[rbreslow]

We're using Rollbar as an exceptions tracking/notification platform. Some exceptions on Rollbar will contain PHI information (primarily file paths containing patient names in stack traces). Rollbar's documentation says their platform is fully HIPPA-compliant.

We will sign a Business Associate Agreement (BAA) with each Compliant SaaS customer that may request one to ensure that Rollbar and the customer are both in alignment with the security controls being enforced to protect such data."

Also, we should consider whether we need to add a credit card to our Rollbar account. If we need to do this to get them to sign a BAA, we should consider whether or not there is a non-profit discount.

See: https://docs.rollbar.com/docs/security#hipaa