Multi-faceted question -- what's the easiest way to attach/link an Outlook email to a customer record? If it's that we should use some extension (or whatever), would that extension be HIPPA compliant?

there was a outlook connector which is now deprecated . You got to use third party add-ons like Celigo Outlook connector and Celigo is HIPPA compliant

We've been using SuperSync for Outlook for about 6 mos. It works great and is inexpensive, but it was recently acquired by Netgain, so I'm not sure what that will mean for the product. I don't know if it's HIPPA compliant. https://www.supersync.cloud/outlook/supersync-email

CloudExtend can provide SOC 2 Type 2 reports as well as penetration tests. With true hands free autopilot it's a game changer. Implementation is super fast.