A hosted solution? Sounds unsuitable for anything requiring extra care to avoid disclosure of PII. (Standing up an app under HIPAA requirements is fun.)