HIPAA Compliance for SaaS Companies

What a SaaS platform has to do when protected health information passes through it, from business associate agreements to the tooling that evidences controls.