The fact the Microsoft already has something in their terms and conditions for that.What's to prevent a company from putting "any fines resulting from HIPAA violations that are a result of using your service will be the responsibility of your company to pay" or some such in a contract?