Is 123FormBuilder HIPAA compliant?

Yes, 123FormBuilder is HIPAA compliant, and you can use our platform to build HIPAA compliant online forms.

Being HIPAA compliant is critical for any company collecting Protected Health Information through electronic forms. If you work in healthcare and handle sensitive medical data, you can ensure your compliance with HIPAA regulations through the features included in our Enterprise Compliance Plan.

Because most HIPAA compliance requirements revolve around data security, 123FormBuilder’s Enterprise Compliance Plan enables you to have multiple user roles with different access levels. You want to ensure that only authorized staff views and manages your patients’ data, so you have complete control over data privacy. You can check the user roles you can define in your HIPAA account. 

We also offer a BAA (Business Associate Agreement) to ensure the protection of PHI through strong security and privacy standards. 

123FormBuilder uses a 256-bit SSL connection throughout the whole form-building experience. All data (at rest and in transit) is encrypted and it’s hosted on AWS (Amazon Web Services) with multiple data centers across the US and Europe. The server rooms are highly secured, monitored 24/7 by trained guards and electronic surveillance, with a multi-factor access control system and daily back-ups that safeguard the integrity of any data moving through our system. We ensure all of these while being GDPR Compliant and ISO27001​ and ISO9001 certified.

When you choose 123FormBuilder’s HIPAA compliant forms, you’ll also count on advanced security measures such as:

• Automatic system log-off occurs after a period of idle time defined in line with industry standards. It prevents unauthorized access to ePHI.  
• We can provide single-tenant installation for enhanced security.
• Upon request, ePHI and any other patient-related data can be deleted.
• You can increase the security of your account with user multi-factor authentication (e.g. 2-step verification). Access the My Account section to enable this feature and add an extra step to your login process.
• Password protection. One of HIPAA’s requirements for data integrity regulates the way users identify themselves prior to accessing any type of data. When using 123FormBuilder, you’ll be required to create strong login passwords and you’ll also have the option to protect your forms with passwords. This way, you can guarantee that only verified individuals in your organization or outside of it can have access to your account and your forms.
• We use spam, virus, and malware protection services provided by McAfee. All potential threats are carefully monitored and cleaned daily so that our partners and users can navigate in a secured environment.
• Every 123FormBuilder user gets a unique ID, which allows you to easily track the activity on your account and online forms, so you can trace all events in case there’s an incident that needs investigation.

123FormBuilder uses robust technical, administrative, and physical safeguards to ensure the compliance of your organization while handling PHI through our online forms. All our employees have signed confidentiality agreements and are up to date with the HIPAA regulations, so you can rest assured that your data is in safe hands. Check here for all our security measures.

If you need more details about 123FormBuilder’s HIPAA Compliance, get in touch with us, we’d be more than happy to walk you through your options.