Stop paying $129 a month for four forms.
CareForm is the HIPAA-conscious form builder for small practices: unlimited forms, Fernet-encrypted submissions, healthcare templates, and a BAA included at no extra charge — $29/mo.
The problem: practice forms are overpriced or non-compliant
Small practices live on forms — intake, consent, history, screenings. The big form tools charge $129/mo for a single user and treat HIPAA as an enterprise upsell.
The alternative is worse: free form tools with no BAA, patient data in plaintext, and a front desk printing PDFs 'temporarily'.
Nobody at a 3-person practice has a compliance department. They need the safe default to also be the cheap default.
$29/mo, BAA included, encrypted by default
Unlimited forms on every tier, with healthcare templates (intake, consent, medical history) ready to customize.
Every submission is encrypted with Fernet (AES-128-CBC + HMAC) before it touches the database. The admin inbox decrypts server-side with your key.
BAA included at no extra charge, e-signed during onboarding — and until it's signed, DEMO mode blocks real PHI collection in code, not just policy. Trial accounts are watermarked 'DEMO — not for PHI'.
What you get
Unlimited forms
Build as many as you need on every tier — intake, consent, screenings, follow-ups.
Encrypted submissions
Fernet (AES-128-CBC + HMAC) encryption before storage. Key mismatch surfaces per-row, never as a silent failure.
BAA-gated live mode
Forms go live only after the BAA is signed. Until then: DEMO mode, watermarked, no real PHI — enforced in code.
Healthcare templates
Intake, consent, and medical-history templates with validated field types (email, phone, required).
Admin inbox
Token-authenticated submission review with server-side decryption.
Schema validation
Required fields, email/phone formats, unknown-field rejection — bad data never reaches the vault.