Is Formisoft HIPAA compliant?
Yes. Formisoft runs on ISO 27001 and ISO 27799 certified infrastructure and is built around HIPAA's administrative, physical, and technical safeguards:
- AES-256 encryption at rest for the database and file storage
- TLS for every connection: TLS 1.2 minimum, TLS 1.3 supported, and database connections require TLS
- Role-based access with four permission levels
- An admin-only audit log of creates, updates, deletes, and some reads
- Hosting in AWS us-east-1 in the United States
- Signed links to uploaded files that expire after 1 hour
- Bcrypt password hashing and HMAC-signed webhooks
A Business Associate Agreement (BAA) is included on every plan.
Get every patient ready before the visit.
Start with Intake, then add booking, reminders, and payments when you need them.
Cancel anytime · BAA included