move get started up

Author: S3Prototype

guides/security-dev-productivity/hipaa-compliance.mdx

@@ -14,6 +14,32 @@ These recommendations from ngrok's team do not constitute legal advice.
 Please consult your own legal and engineering teams to ensure HIPAA compliance.
 </Warning>
 
+
+## Get started
+
+You can enable HIPAA compliance yourself from the [ngrok dashboard](https://dashboard.ngrok.com/billing) by navigating to **Billing > HIPAA Compliance**.
+
+Before you enable HIPAA, make sure your account meets these requirements:
+
+1. You must be an **admin**.
+1. You must have a **v3 pay-as-you-go account**.
+1. You must execute a Business Associate Agreement (BAA) by providing the **executor name** and **legal business name**. You can view the executed BAA on the billing page at any time after you agree to it.
+
+<Note>
+Once HIPAA compliance is enabled, you can't downgrade your account.
+</Note>
+
+### What changes when HIPAA compliance is enabled
+
+Enabling HIPAA compliance applies the following changes to your account to help keep PHI (protected health information) out of stored data:
+
+- Traffic Inspector full capture is always disabled while HIPAA compliance is enabled.
+- Traffic Inspector hides request data, such as headers and bodies.
+- Public HTTP-only endpoints are prohibited from the Cloud Endpoint UI.
+- A 50% HIPAA compliance surcharge is added to your payment plan.
+
+If you have questions about HIPAA compliance on ngrok, reach out to sales@ngrok.com.
+
 ## Shared responsibility model
 
 ngrok operates with a shared responsibility model.
@@ -45,28 +71,3 @@ These are ngrok's recommendations for setting up and configuring your ngrok acco
 - [Verify webhooks](/traffic-policy/actions/verify-webhook/) to ensure the authenticity of incoming requests
 
 See the guide on [security quick wins](/guides/security-dev-productivity/securing-your-tunnels/) for information on how to set up authentication, authorization, encryption, auth tokens, logging, and related features in a secure manner.
-
-## Get started
-
-You can enable HIPAA compliance yourself from the [ngrok dashboard](https://dashboard.ngrok.com/billing) by navigating to **Billing > HIPAA Compliance**.
-
-Before you enable HIPAA, make sure your account meets these requirements:
-
-1. You must be an **admin**.
-1. You must have a **v3 pay-as-you-go account**.
-1. You must execute a Business Associate Agreement (BAA) by providing the **executor name** and **legal business name**. You can view the executed BAA on the billing page at any time after you agree to it.
-
-<Note>
-Once HIPAA compliance is enabled, you can't downgrade your account.
-</Note>
-
-### What changes when HIPAA compliance is enabled
-
-Enabling HIPAA compliance applies the following changes to your account to help keep PHI (protected health information) out of stored data:
-
-- Traffic Inspector full capture is always disabled while HIPAA compliance is enabled.
-- Traffic Inspector hides request data, such as headers and bodies.
-- Public HTTP-only endpoints are prohibited from the Cloud Endpoint UI.
-- A 50% HIPAA compliance surcharge is added to your payment plan.
-
-If you have questions about HIPAA compliance on ngrok, reach out to sales@ngrok.com.