From support ticket: Allow for all plans to be HIPAA compliant by issuing BAA