diff --git a/resources/hipaa.mdx b/resources/hipaa.mdx
index 08203852..fb546870 100644
--- a/resources/hipaa.mdx
+++ b/resources/hipaa.mdx
@@ -37,7 +37,7 @@ The customer remains the owner of their application, databases, and client devic
 
     
 * **Client Device Security**  
-  Customers must implement all necessary **administrative, physical, and technical safeguards** on the **client-side devices** (mobile, web app). This includes device access controls, encryption of the client-side PowerSync SQLite database, and secure disposal of data when a user or device is de-provisioned.
+  Customers must implement all necessary **administrative, physical, and technical safeguards** on the **client-side devices** (mobile, web app). This includes device access controls, encryption of the client-side PowerSync SQLite database (see [client-side encryption](/client-sdks/advanced/data-encryption#at-rest-encryption)), and secure disposal of data when a user or device is de-provisioned. To clear the whole database, see the `disconnectAndClear` method across various SDKs ([JavaScript example](https://powersync-ja.github.io/powersync-js/common/interfaces/CommonPowerSyncDatabase#disconnectandclear)). If using Raw Tables, be sure to set a `clear` statement for each table containing ePHI, as specified in [Deleting Data and Raw Tables](/client-sdks/advanced/raw-tables#deleting-data-and-raw-tables)
 
     
 * **Data Filtering and Access Control**  
diff --git a/resources/security.mdx b/resources/security.mdx
index e9f60134..b54d0773 100644
--- a/resources/security.mdx
+++ b/resources/security.mdx
@@ -25,7 +25,7 @@ See [Private Endpoints](/configuration/source-db/private-endpoints) for connecti
 
 ### HIPAA Compliance
 
-PowerSync Cloud is HIPAA compliant. You can sync Protected Health Information (PHI) or electronic PHI (ePHI) using PowerSync Cloud provided that you fulfill your obligations under our shared responsibility model. Refer to our [HIPAA Compliance](/resources/hipaa) page for details.
+PowerSync Cloud is HIPAA compliant for Team and Enterprise customers. You can sync Protected Health Information (PHI) or electronic PHI (ePHI) using PowerSync Cloud provided that you fulfill your obligations under our shared responsibility model. Refer to our [HIPAA Compliance](/resources/hipaa) page for details.
 
 
 ## Client-Side Security