JotForm Data Compliances?

There's lots of concerns about the protection of data and how companies are providing the additional protection of a clients' data.

Where do you stand with:

PCI?

Family Educational Rights and Privacy Act (FERPA)?

HIPPA?

Do you have any other data security certifications?

Thank you.

--Richard Ota

Update (April 19, 2018) HIPAA is available for our Gold & Silver plan. 

https://www.jotform.com/hipaa/ 

 Thank you for your interest in our service.

We do care about security and our service can be used in a secure way. The form data is not shared with any third parties, and we do not access it for non-administrative purposes.

However, I do not think that we have any security certifications. Please check the following thread to find out more information about our security practices:

Is JotForm HIPAA Compliant

In case you would like to have complete control over the application, you might consider a self-hosted JotForm Licensing Solution:

http://www.interlogy.com/products/jotform/

Please feel free to contact us if you need any further assistance.

Update: JotForm is  PCI DSS compliant. We have PCI Service Provider Level 2 certificate. We'd happy to provide certificate to any users who would need it for their payment gateway. Just contact our support team. 

Great news! JotForm now offers HIPAA compliance. This means users in the healthcare industry can use JotForm to collect sensitive patient information through consent and onboarding forms, medical history updates, online bill payments, and prescription refill requests. 

HIPAA-compliant forms require a Gold pricing plan, which is only $99 a month or a Silver pricing plan, which is $39 a month. A business associate agreement (BAA) is also available upon request.

For more information about our HIPAA-compliant forms, visit www.jotform.com/hipaa. 

Update: HIPAA is available for the Silver plan as well.