Pricing

How this works. CareForm implements encryption at rest, role-based access, session timeouts, and an immutable audit log of every submission view and export. A BAA template ships in the product and is executed between CareForm and your practice at signup (have your counsel review it). No software is “HIPAA certified” — HHS does not certify products — and a BAA alone does not make a practice compliant; your own safeguards, training, and policies matter too. Forms cannot accept submissions until the practice's BAA is signed — enforced in code.