Features

Form builder for small practices: encrypted submissions, role-based access, immutable audit log, healthcare templates. $29/mo — stop paying $129/mo for four forms. BAA template available at signup.

How this works. CareForm implements encryption at rest, role-based access, session timeouts, and an immutable audit log of every submission view and export. A BAA template ships in the product and is executed between CareForm and your practice at signup (have your counsel review it). No software is “HIPAA certified” — HHS does not certify products — and a BAA alone does not make a practice compliant; your own safeguards, training, and policies matter too. Forms cannot accept submissions until the practice's BAA is signed — enforced in code.

Unlimited forms

Build as many as you need on every tier — intake, consent, screenings, follow-ups.

Encrypted submissions

Fernet (AES-128-CBC + HMAC) encryption before storage. Key mismatch surfaces per-row, never as a silent failure.

BAA-gated live mode

Forms go live only after the BAA is signed. Until then: DEMO mode, watermarked, no real PHI — enforced in code.

Healthcare templates

Intake, consent, and medical-history templates with validated field types (email, phone, required).

Admin inbox

Token-authenticated submission review with server-side decryption.

Schema validation

Required fields, email/phone formats, unknown-field rejection — bad data never reaches the vault.

See pricing