Can Jotform be used by a covered entity if a web design company implements jotform into our site?