Form Features

File Uploads in Forms: Validation, Size Limits, and What to Get Right

Collecting files through forms (insurance cards, lab results, IDs) requires validation, clear limits, and good error handling. Here's how to set it up properly.

Formisoft Team

· 2 min read

Patients need to upload things: insurance cards, photo IDs, lab results, even a photo of a prescription bottle (often the most accurate medication list you'll get). Without validation, upload fields create more problems than they solve.

What Goes Wrong

  • Huge photos that fail on slow connections
  • The wrong document (you asked for insurance, you got a utility bill)
  • File types nobody can open
  • Uploads that fail silently, so nobody knows something is missing

What Formisoft Handles

Size limit. Uploads are capped at 10MB, plenty for a phone photo of a card. A file over the limit gets a clear message with the maximum size, not a generic error.

File types. Choose which types each upload field accepts: documents (PDF, DOC, DOCX), images (JPG, PNG), or spreadsheets (XLS, XLSX, CSV). For insurance cards, accept images only.

Preview. After choosing a file, the patient sees its name and size and can remove it and pick another before submitting.

Setting It Up Right

Be specific. "Upload a photo of the front of your insurance card" beats "Upload document".

Show uploads only when relevant. With conditional logic:

  • Insurance card only if the patient has insurance
  • Referral letter only for referred patients
  • Prior authorization only for certain procedures

Test on a phone. Most patients upload from their photo library or camera.

Healthcare Use Cases

  • Insurance cards: front and back photos, images only.
  • Lab results and records: PDFs from patient portals or scans.
  • Prescription photos: drug name, dosage, prescriber, and pharmacy in one shot.
  • ID verification: driver's license or government ID at registration.
  • Referral letters: PDF uploads for specialist referrals.

Security

Files are encrypted with AES-256 on US-hosted infrastructure. Type validation blocks unwanted formats, rate limiting blocks automated abuse, and files sit behind the same role-based access as the rest of your data.

Uploads count toward patient readiness too: when every form on the visit is submitted, uploads included, the patient is ready before they walk in.


Related: patient intake software | intake form templates | dental practices

Get every patient ready before they walk in.

  • Forms, consents, and signatures before the visit
  • Your paper forms converted by AI
  • BAA included
Get started

Keep reading

Get every patient ready before they walk in.

Patients finish forms, consents, and insurance cards from their phone. Everything included, set up for you.

BAA included · We set up your front desk