- weboriginationAsked on June 14, 2011 at 01:03 PM
Hello. I am working on several forms for a counseling / therapy client that I thought I could use the DropBox service to send the forms to, but just yesterday discovered that this will not work because the DropBox service is not HIPPA approved. My client uses a system called "eDrawer" to manage all their patient information and several forms I am building for their site are indeed patient related information. Here is an example of one form...
Their "eDrawer" system has the ability to go out and "get" the information from submitted forms and, again, I was going to use the DropBox service to send the forms to and then have eDrawer simply go grab the information from the DropBox service. But, with DropBox not being HIPPA compliant, I now have to find another way to make this happen for my client. Unfortunately, eDrawer will not allow me to send the forms directly to their service - as it is an Enterprise type system hosted at a server in my client's office and they just do not allow direct connectivity. It also cannot, from what I am told, grab this information from an individual computer for some reason. So, the eDrawer rep for my client suggested that I set-up a Secure FTP area on my server and have the form information sent there - where eDrawer could then connect and grab all the patient information. And, having an SSL on the FTP server will satisfy HIPPA requirements, so that appears to be my only option at this point. So, I guess my question is this... Can JotForm be configured to send the form information directly to a Secure FTP Server? (I tried searching the forum, but could not really find much about connecting to an FTP Server.)
Thank you, in advance, for your answer.
- DanielGriffinAnswered on June 14, 2011 at 01:35 PM
By secure ftp, do you mean using a public/private key pair? It is possible send uploaded files to an FTP server but this happens over standard ftp. Transfering passwords to jotform can be done securily however.
To do this, go to your submissions page for the report and click the gear icon:
If your page is currently unsecure you will see the following dialog appear:
Click go secure to transfer your connections details via https. Hope this helps.
- weboriginationAnswered on June 14, 2011 at 02:03 PM
Hello Daniel. Thanks for getting back to me so quickly.
I'm not quite sure what you mean by "transferring passwords." I need to transfer the entire contents of each form from the online form to the FTP server, where the eDrawer system will then go out and grab the files and upload into their system.
I am in the process now of setting up an SSL Certificate on the commonwealthcounseling.com website and creating the FTP site / folder. If I'm looking at the above correctly, it appears that I can indeed set-up the forms to be sent directly to an FTP account. But, are you saying they will not be secure / encrypted - even with the GoDaddy SSL from JotForm --AND-- having another SSL directly on the site? If so, that may be a problem.
Also, if I may, can you tell me if the notification emails that are sent out from the JotForm service are secure? (IE: I know they are not encrypted, but are they secured by the SSL from JotForm and/or will they be secure by the SSL we will have on this site?)
Thank you, again!
- DanielGriffinAnswered on June 14, 2011 at 03:06 PM
No problem. You need to supply the ftp password when you first set up the connection, so that Jotform can send the files each time they are uploaded. As far as I know the ftp transfer is basic ftp, without secure tunneling. I will raise your query to the next level support to confirm this, but I've searched the forums and am fairly sure that this is the case. In order for SFTP transfers to take place you would need to be using a keypair (ie the ftp client would need a public key which matches the servers private key).
Also, I'm afraid that there really isn't such a thing as secure email, unless it has been encrypted. Email is intrinsically unsafe due to the way it works since it is routed through many servers as it crosses the internet, so certificates on each end don't help.
Sorry if this isn't the answer that you hoped for.
- weboriginationAnswered on June 14, 2011 at 09:47 PM
Thank you, again, for the quick response.
Please do let me know what the next level of support says about the FTP / secure transfer process.
You have been very helpful.
Thank you, again.
- weboriginationAnswered on July 11, 2011 at 05:39 PM
Okay, I'm all ready to do this (finally). My client has set-up a Secure FTP server and I have the IP Address, Port Number, and Username / Password. However, when I go to the Submissions page for my form, the Upload to FTP option is crossed out. When I click on it, it says something like I have to select a field to use this option. But, all the fields that I want to have processed on the form are already checked.
Am I doing something wrong?
- JotForm SupportNeilVicenteAnswered on July 12, 2011 at 04:05 AM
I have answered your new issue in the other thread that you opened. Let us know if you're having difficulties following the instructions I laid out in my response to that thread.
- tpclickzAnswered on July 16, 2011 at 03:51 AM
Does this send that one submission form to or ALL submissionss of that particualar form automatically?
- JotForm SupportmlizAnswered on July 16, 2011 at 04:12 AM
I already have answered your question on the separate thread you have opened.