

Your patient’s data is secured by a 128-bit SSL secure browser encryption. All PHI is encrypted in transit and at rest—while being submitted back to your account and at rest in our database. Protect sensitive data with fully encrypted patient submissions. ePHI cannot leave your account insecurely.
Under HIPAA, PHI is considered to be “any identifiable health information that is used, maintained, stored, or transmitted by a HIPAA-covered entity.” ePHI works the same way as PHI does, but it includes information that is created, stored, or transmitted electronically. This could include systems that operate with a cloud database or transmitting patient information via email.


Your account is protected by all the physical, technical, and administrative safeguards to surpass HIPAA compliance. FormDr builds a better, more secure environment to mitigate your risk and help you prove compliance with HIPAA. Maximize your PHI security with HIPAA compliant medical forms online.
Keep detailed records of who has accessed your account and viewed sensitive PHI. Your account will keep a detailed audit log of all users’ actions, dates, and times that events took place on your account. Track login attempts, the IP address, device, and location of all users that are accessing your account. Monitor your account’s history and see what actions your users are performing.

FormDoctor gives your practice one HIPAA-compliant platform to collect forms, communicate with patients, and automate follow-up. We help practices who:
Only show information that is relevant to the patient with conditional logic forms. Make it simple for your patients to complete your forms and improve the accuracy of the data you receive with conditional logic.
Send a text message invitation to your patients to complete your forms. Give patients the freedom to sign and complete forms with any device, anywhere.
Send a prefilled contracts, agreements, and forms to have patients securely sign forms customized for them. Create financial contracts with pricing specific to the patient.
Invite your team to your account and grant permissions to the exact features each user needs. Lock down assistant user accounts and give them read-only access, or give them full administrative controls.