Ask HN: How do healthcare co's using Stripe and Shopify fulfil HIPAA?

I was wondering if there are any founders or experts in this area who know how e-commerce sites using software such as Stripe, Shopify, etc., which don't sign BAAs, fulfil HIPAA obligations?