Need a sql server but it has to be Hipaa compliant debating host vs onsite

Hello, I am in the process trying to decide if I am going to buy a server and setup sql server and make a few changes here in the office or just find a good hosted sql server and pay the monthly fees instead of starting from scratch….. My other concern the sql server has to be on a Hippa compliant server and connection …… any suggestions or directions??