Security & HIPAA

Yes. Formisoft runs on ISO 27001 and ISO 27799 certified infrastructure and is built around HIPAA's administrative, physical, and technical safeguards:

• AES-256 encryption at rest for the database and file storage
• TLS for every connection: TLS 1.2 minimum, TLS 1.3 supported, and database connections require TLS
• Role-based access with four permission levels
• An admin-only audit log of creates, updates, deletes, and some reads
• Hosting in AWS us-east-1 in the United States
• Signed links to uploaded files that expire after 1 hour
• Bcrypt password hashing and HMAC-signed webhooks

A Business Associate Agreement (BAA) is included on every plan.

Formisoft is hosted on infrastructure certified to international healthcare security standards:

• ISO 27001, information security management systems
• ISO 27799, security management in health informatics

These certifications complement our HIPAA-aligned administrative, physical, and technical safeguards, encryption, audit logging, and signed BAA on every plan.

Multiple encryption layers protect patient data:

• At rest: AES-256 encryption for the database and file storage
• In transit: TLS 1.2 minimum at the load balancer, TLS 1.3 supported, and database connections require TLS
• Uploaded files: signed links that expire after 1 hour
• Passwords: hashed with bcrypt (10+ salt rounds)
• Form passwords and API tokens: cryptographically secured

Patient data is hosted in AWS us-east-1 in the United States.

Formisoft keeps an audit log of creates, updates, deletes, and some reads. Each entry records:

• Action type: create, update, delete, or read
• Resource affected: patient, form, submission, appointment, etc.
• User who performed the action
• IP address and user agent (browser/device)
• Precise timestamp

The audit log is admin-only. Admins can filter it by resource and action in Settings.

Four roles with distinct access levels:

• Admin: full access including team management, billing, organization settings, and all patient data
• Provider: view and manage patients, appointments, and submissions (no settings or billing)
• Staff: manage patients and appointments day-to-day (no settings)
• Patient: limited access to their own data only

Team members are invited by email and assigned a role by an admin. Roles can be changed at any time.

Formisoft is hosted on AWS in the us-east-1 region in the United States:

• Database: AES-256 encrypted, with 7-day backups and a standby in a second availability zone
• File storage: AES-256 encrypted, with signed links that expire after 1 hour
• Monitoring: AWS CloudTrail and GuardDuty are enabled

The AWS infrastructure Formisoft runs on is ISO 27001 and ISO 27799 certified.

Magic links use JWT (JSON Web Tokens) signed with a secret key:

• Each token contains the patient ID, appointment ID, form IDs, and organization ID
• Tokens expire after 7 days
• No login or account creation required for patients
• Tokens are single-use for appointment-based intake