Make the forms HIPAA compliant

Wishlist Form Builder
1

Make the forms HIPAA compliant

3 Likes
2

Folks, our former Wishlist portal, where our users shared their requests and suggestions, was transferred to this forum. You’re most welcome to vote, add new ideas, and leave your comments here — we surely will consider them all! :star_struck:

Original Votes: 2

1 Like
3

This would be great! Currently have to use JotForms for our clients.

2 Likes
4

Hi @Caleb1 :wave:

Thanks for sharing your feedback with us!

Unfortunately, the solution hasn’t been found yet, but we’ll keep you informed about any changes in this thread :slightly_smiling_face:

2 Likes
5

Hi Team,

Is it possible to end-to-end encryption on individual forms that require an access code (set by an administrator) to view submission data? Maybe it could be combined with this wish list, Make the forms HIPAA compliant - #4 by Max , and others for compliance to Data Protection Regulations?

-mw

2 Likes
6

Hi there, @iammasterweb :waving_hand:

Thank you for the feedback!

While we don’t have any certificates to prove HIPAA compliance, I’d like to say that we take privacy measures very seriously. We store encrypted information from the froms on protected server disks in Google Cloud Platform.

By clicking the Submit button the user agrees to share their data, which is accessible only by the widget owner and is not processed by Elfsight in any manner. Additionally, you can include a Consent checkbox in your widget settings to ask the users for their consent before they submit the data.

However, I agree that it would be great to make our forms HIPAA-compliant, and we’ll try to consider this opportunity in the future

7

Hi Max,

If the forms were to become GDPR-compliant, or compliant to a stronger Global Data Protection Framework/Regulation that includes HIPAA compliance, that would be even better. Maybe, I should have stated this from the initial post. I just wasn’t sure if there were any other wishlist requests for other Global Data Protection Frameworks/Regulations.

Smalls businesses (SMB) in particular need the ease of staying compliant, and proving they are compliant wherever they are operating on the Globe. So as it relates to End-To-End encryption of individual forms, and being able to use an access code (known only to an SMB administrator), my preference is for at least GDPR compliance, HIPAA only covers Health data in the US - https://hipaauniversity.com/blog/hipaa-vs-gdpr-what-sets-them-apart/

And, while I’m sure Elfsight takes privacy seriously, there are use cases for SMBs that require an extra layer of Data Protection, especially when using third party services. In the end, it’s just a wish, as I prefer to use Elfsight Forms, rather than another.

-mw

1 Like