Is Formisoft HIPAA compliant?
Yes. Formisoft runs on ISO 27001 and ISO 27799 certified infrastructure and is built around HIPAA's administrative, physical, and technical safeguards:
- AES-256 encryption at rest for the database and file storage
- TLS for every connection: TLS 1.2 minimum, TLS 1.3 supported, and database connections require TLS
- Role-based access with four permission levels
- An admin-only audit log of creates, updates, deletes, and some reads
- Hosting in AWS us-east-1 in the United States
- Signed links to uploaded files that expire after 1 hour
- Bcrypt password hashing and HMAC-signed webhooks
A Business Associate Agreement (BAA) is included at no extra cost.
Get every patient ready before the visit.
Book a short call. We set it up with you.
BAA included · We set up your front desk