HIPAA

I need to verify HIPAA controls with this client.

Can we force a client to only send via a certain protocol and version, like TLS 1.2?

Yes, see https://winscp.net/eng/docs/ui_login_tls