Building a HIPAA compliant self-serve data platform