formisoft
Free tools

HIPAA compliance checker

Answer 15 yes or no questions about how your practice handles patient data, and get a score with specific fixes.

Administrative safeguards

  • Do you have a designated HIPAA Privacy Officer?
  • Do you have written HIPAA policies and procedures?
  • Do staff complete HIPAA training at least annually?
  • Do you have an incident response plan for data breaches?

Physical safeguards

  • Are workstations with patient data in secure areas?
  • Do you use automatic screen locks on all devices?
  • Are paper records stored in locked cabinets?

Technical safeguards

  • Is all patient data encrypted at rest and in transit?
  • Do staff use unique login credentials (no shared passwords)?
  • Do you have audit logs for who accesses patient records?
  • Are your systems protected with firewalls and antivirus?

Digital intake and forms

  • Do your online forms use HTTPS encryption?
  • Does your form provider sign a Business Associate Agreement (BAA)?
  • Can patients access or request their intake data?
  • Do you collect only the minimum necessary information?

This checker is for education only. It is not legal advice or a formal HIPAA risk assessment.

Your score so far

0%

0 of 15 checks passed, 0 of 15 answered

Administrative safeguards0/4
Physical safeguards0/3
Technical safeguards0/4
Digital intake and forms0/4

Keep in mind

  • HIPAA compliance is ongoing. Do a formal risk assessment at least once a year with a qualified professional.
  • Document everything: policies, training records, risk assessments, and incident reports. Auditors ask for them.
  • Review your Business Associate Agreements with every vendor that handles patient data, including form, email, and cloud storage tools.

Intake forms your compliance officer can sign off on.

Formisoft sends patients their forms when they book, with encryption, audit logs, and a signed BAA. Your front desk sees who is ready before the visit.

Cancel anytime · BAA included

Get startedBook a demo