I'm a CPA in MA who recently signed up with www.emochila.com to provide my firm's website. After doing the proper research, I found that their data was stored under updated encryption behind user-authenticated portals. It was a pretty easy way for me to make sure my firm was compliant with the law, and design a site to boot.