Porter ensures compliance for all AWS infrastructure that is managed by Porter, including EKS, RDS, S3, and auxiliary services like Cloudwatch. With a click of a button, all infrastructure controls on the compliance management platform, Oneleet (YC S22), will pass instantly.
Porter supports both SOC2 and HIPAA controls. With HIPAA in particular, there is only one infrastructure control that Porter will not be able to automate, which is the removal of PHI in application logs. By nature, this is something that the customer will have to ensure on their own.
You may need to sign a BAA with your underlying cloud provider (more on that here).