Can you clarify this to me : Are you HIPAA compliant and is there any way to print data when using encrypted forms??

  • MariBiz
    Asked on July 17, 2017 at 7:43 PM
  • Jeanette JotForm Support
    Replied on July 17, 2017 at 8:09 PM

    Update (April 19, 2018) HIPAA is available for our Gold & Silver plans.

      https://www.jotform.com/hipaa/ 

     

    I see you posted a thread on July 15th which nobody answered .

    https://www.jotform.com/answers/1200126-Please-clarify-for-me-

    Please accept our apologies for the inconveniences.

    We are investigating why, our support team should always answer threads, and they will be visible once any of us answer.

    On regards to the points you mention:

    1. The only way to view encrypted form submissions is in your browser using the JotForm console at https://www.jotform.com/submissions/###

    Yes, there is no other way around.

    2. There is no way to download all encrypted forms (or data), then decrypt to view/access on your local computer.

    That is the purpose of encrypted forms, you can only view them online.

    3. There is no way to print the grid of responses found at https://www.jotform.com/submissions/###

    Same reason as above, the data can only be decrypted to be seen on the submissions view page, not to be printed nor downloaded. If you wish to download them, then you should not use form encryption.

    Hope this clearer now.

     

  • MariBiz
    Replied on July 18, 2017 at 5:32 PM

    So JotForm would not be a good solution for a medical purpose where creating HIPAA compliant forms and capturing that data are required. Perhaps this should be clarified as a warning for users not to create JotForms requiring HIPAA compliance.

    I'm not sure why you would say "That is the purpose of encrypted forms...", implying that encryption is only used online and it's absurd to think encrypted form data could be transmitted elsewhere.

    Having an encrypted form that can be downloaded, then decrypted on an authorized local computer seems like a reasonable request.

  • Jeanette JotForm Support
    Replied on July 18, 2017 at 6:05 PM

    We understand this concern, the form encryption feature was primarily conceived to only get data in a secure way and to be used online.

    As explained on this user guide:

    Some of the features that are not available for Encrypted Forms are:
    1. PDF Downloads.
    2. Reports (this includes downloading Excel and CSV files from within Submission Panel).
    3. Emails:  Autoresponder (usually emailed to the form submitters), and email notifications.

    All server side gathered and processed data, can not be retrieved in encrypted forms, because your private key is never sent to our servers.

    At any rate, I will be sending your request to our back end team, and if this is something many people is requesting to, then it might become a feature in the near future.

  • Jeanette JotForm Support
    Replied on July 18, 2017 at 6:14 PM

    I omitted to say that we currently do not support HIPAA.

    However, compliance is an ongoing project that our team is planning to complete probably until the end of this year. In any case, this would be announced.

    You can alternatively choose this competitor, their prices are higher, but is already HIPAA complaint:

    https://www.formassembly.com/

     

  • Rose
    Replied on April 10, 2018 at 6:41 AM

    Great news! JotForm now offers HIPAA compliance. This means users in the healthcare industry can use JotForm to collect sensitive patient information through consent and onboarding forms, medical history updates, online bill payments, and prescription refill requests. 

    HIPAA-compliant forms require a Gold pricing plan, which is only $99 a month or a Silver pricing plan, which is $39 a month. A business associate agreement (BAA) is also available upon request.For more information about our HIPAA-compliant forms, visit www.jotform.com/hipaa

  • tina JotForm Developer
    Replied on April 19, 2018 at 8:01 AM

    Update: HIPAA is available for Silver plan as well.