Is Formisoft HIPAA compliant?
Yes. Formisoft runs on ISO 27001 and ISO 27799 certified infrastructure and is designed to meet HIPAA's administrative, physical, and technical safeguard requirements:
- ISO 27001 information security management and ISO 27799 health informatics security
- 256-bit AES encryption at rest and TLS 1.3 in transit
- Role-based access controls with four permission levels
- Complete audit logging of all data access and modifications
- US-only data hosting
- Secure token generation for magic links
- Bcrypt password hashing and HMAC-signed webhooks
