HIPAA compliant forms
HIPAA compliant forms patients finish before the visit.
Patients finish them on their phone. Your data stays protected.
BAA included
Signed with every account, at no extra cost.
A private link per patient
No app, no account, and no PHI in email attachments.
Built for intake
Consents, e-signatures, insurance card photos, and medical history.
What HIPAA asks of a form tool
- Signed BAA
- Required before a vendor handles PHI. Accept it in Settings under Compliance.
- Encryption
- AES-256 at rest, TLS in transit.
- Access control
- Admin, Provider, and Staff roles decide who sees patient data.
- Audit trail
- Every change is logged with user, time, and IP address.
How form builders compare
Public information, October 2026.
| Topic | Signs a BAA | Notes |
|---|---|---|
| Formisoft | Signs a BAA:Included | Notes:Built for patient intake, booking, and reminders |
| Google Forms | Signs a BAA:Paid Workspace plans only | Notes:Not free accounts Compare Google Forms and Formisoft |
| Microsoft Forms | Signs a BAA:Microsoft 365 business plans | Notes:Sharing set up by you Compare Microsoft Forms and Formisoft |
| Jotform | Signs a BAA:HIPAA plans only | Notes:General-purpose Compare Jotform and Formisoft |
| Formstack | Signs a BAA:HIPAA plans only | Notes:General-purpose Compare Formstack and Formisoft |
| Typeform | Signs a BAA:Not confirmed | Notes:Ask Typeform Compare Typeform and Formisoft |
| Tally | Signs a BAA:Not confirmed | Notes:Ask Tally Compare Tally and Formisoft |