Compliance documentation

My client is in the insurance business. They've asked me about compliance. Is there any sort of statement about things like HIPAA or any of the ISO certifications?