formisoft

HIPAA compliant forms

HIPAA compliant forms patients finish before the visit.

Every plan includes a signed BAA, encryption, and an audit log. Patients fill out intake, consents, and insurance cards on their phone from a secure link.

Get startedBook a demo
A patient form with ID and insurance card uploads and a signature field

BAA on every plan

A signed Business Associate Agreement comes with every account. There is no separate HIPAA tier.

A private link per patient

Patients open their forms from a secure link. No app, no account, and no PHI sitting in email attachments.

Built for intake

Consents with e-signatures, insurance card photos, and medical history, with reminders until the forms are done.

What HIPAA asks of a form tool

Signed BAA
HIPAA requires one before a vendor handles PHI. Formisoft includes it on every plan, accepted in Settings under Compliance.
Encryption
Submissions and uploaded files are encrypted at rest with AES-256 and sent over HTTPS (TLS) in transit.
Access control
Admin, Provider, and Staff roles decide who on your team can see patient data. Admins manage the team.
Audit trail
Changes to patients, forms, and submissions are logged with the user, time, and IP address. Admins can review the log.
Security details

How form builders compare

Whether each vendor signs a BAA, based on public information as of October 2026. Vendor terms change, so confirm before collecting PHI.

Business Associate Agreement availability by form builder
FormisoftSigns a BAA:Every planNotes:Built for patient intake, with booking, reminders, and readiness
Google FormsSigns a BAA:On eligible paid Google Workspace plansNotes:Not for free consumer accounts. You configure sharing and access yourself. Compare Google Forms and Formisoft
Microsoft FormsSigns a BAA:On eligible Microsoft 365 business plansNotes:You configure sharing and data policies yourself. Compare Microsoft Forms and Formisoft
JotformSigns a BAA:On its HIPAA plansNotes:General-purpose form builder Compare Jotform and Formisoft
FormstackSigns a BAA:On its HIPAA plansNotes:General-purpose form and document tool Compare Formstack and Formisoft
TypeformSigns a BAA:Not confirmedNotes:Ask Typeform whether your plan includes a BAA. Compare Typeform and Formisoft
TallySigns a BAA:Not confirmedNotes:Ask Tally whether a BAA is available. Compare Tally and Formisoft

Questions

A form builder can be used for protected health information (PHI) when the vendor signs a Business Associate Agreement (BAA) and the product provides safeguards such as encryption in transit and at rest, access controls, and audit logging. Your practice is still responsible for using the tool in a compliant way.

Only on a paid Google Workspace plan covered by Google's BAA, and only if you configure sharing and access correctly. Free consumer Google accounts are not covered. Google Forms also has no patient records, booking, or intake reminders.

We could not confirm whether Typeform signs a BAA on every plan. Ask Typeform directly before collecting PHI, and get a signed BAA in place first.

Generally not. Free tiers of popular form builders do not come with a signed BAA. Where HIPAA support exists, it is usually limited to specific paid plans.

Yes. Every Formisoft plan includes a signed Business Associate Agreement at no extra cost. There is no separate HIPAA tier or add-on.

Both offer HIPAA plans that include a BAA. Check that you are on one of those plans before collecting PHI. Both are general-purpose form tools, so booking, patient records, and visit readiness are not their focus.

Collect patient forms the HIPAA way.

A signed BAA on every plan, and forms patients finish before the visit.

Cancel anytime · BAA included

Get startedBook a demo