SecureForm: HIPAA-Compliant Forms

Yes. SecureForm integrates with any Web or PDF form hosted anywhere. A few minutes is all that it takes to update an existing form to send its data to SecureForm for processing and delivery or storage.

No. You can keep your web site where it is and either integrate its existing forms with SecureForm, or link your site to forms saved in SecureForm FormBuilder.

SecureForm will transmit or save your form data in any combination of formats: plain text, two-column html, CSV (Excel), XML, refilled custom templates (HTML, XML, or other), and re-filled PDF templates (even with data from Web forms).

SecureForm transmits or saves your form data in any combination of methods: Secure Email, SecureChat, FTP/Secure FTP, hosted MySQL database, and Online "WebAide Documents" File Storage. You can also receive simple notices of new form posts to email addresses, via regular text addresses, or to SecureChat.

Yes. HIPAA customers get a trustmark that looks like this:

We do not make your forms. You or your Web designer can modify your existing forms, make new forms hosted elsewhere, or use SecureForm visual Form Builder to make and host new forms. We do provide custom consulting services for form design. This is $250/hour.

We do not manage or migrate your forms. You or your Web designer can migrate your existing forms, make new forms hosted elsewhere, or use SecureForm visual Form Builder to make and host new forms.

You don't need programming skills when using the SecureForm visual Form Builder or PDF forms. When designing or updating your existing/external Web forms, you or your Web designer will have to edit a couple of lines of HTML code to direct the form submissions to SecureForm; if a content management system such as Gravity Forms for Wordpress generates or dynamically manages your forms, then you may need a little coding to integrate SecureForm.

Pricing is based on the number of forms and number of submissions per day. See the price list. The tiers are:

• Starter: Up to 3 forms and up to 1,000 posts/day
• Professional: Up to 25 forms and up to 5,000 posts/day
• Enterprise: Up to 100 forms and up to 10,000 posts/day

For larger limits or dedicated SecureForm processing servers, please contact sales for pricing.

When using SecureForm, data transmits from the end-user’s Web browser (or PDF) to LuxSci, encrypted using strong ciphers. Once it arrives, what happens next depends on the settings you configure; the security of the results is then, to a certain degree, your choice:

• Encrypted Email: The data can be sent encrypted using PGP, S/MIME, Forced TLS, or via Escrow secure Web pickup.
• SecureChat: You can send form data to recipients securely using our SecureChat real-time communication and collaboration system. These messages are AES-256-encrypted at rest and encrypted via TLS during transmission.
• Secure FTP: You can upload data and files to your server using Secure FTP and a strong cipher like AES 256. Once the files are there, their security is up to you.
• MySQL Database: You can save your form data to a MySQL database and you have the option of having all files and data encrypted at rest with native MySQL AES-128 encryption.
• WebAide File Storage: You can save your form data to our WebAide Documents collaborative online file storage system. You can choose to have this data be automatically and seamlessly PGP-encrypted.

You do not need your own SSL certificate to use SecureForm; however, if you are hosting your forms on your own website, we do recommend that you secure that site with SSL (TLS) to protect your form pages themselves from alteration/hacking before getting to your end users.

SecureForm includes detailed reports of all successful form posts, and of many kinds of post failures (including emailed alerts of important types of failures). If saving your data to a hosted MySQL database, SecureForm provides an audit trail of views and deletions (if such are permitted) of all rows of posted data accessed via our API or or Web-based Form Database viewer.

Yes. Users of your Web-based forms can sign a written signature using their mouse, stylus, or finger, and it's possible to capture and deliver that signature along with your form post. The post can even auto-append to refilled PDF templates or inserted inline in refilled HTML templates. See Ink Signatures.

Yes. SecureForm has an API that allows listing, downloading, and optional deletion of SecureForm data stored to a hosted MySQL database.

Yes. You can order Private Labeling and then customize all URLs so that LuxSci's domain names are not visible anywhere. You will also need to buy your own TLS certificate or purchase one from LuxSci.