Is nucleus actually a hipaa covered entity or am I thinking about this wrong?