Free HIPAA-compliant forms you can use today.
Most free HIPAA form templates you find online are PDFs you print and hand to patients. That defeats the purpose. These are Jotform templates you import, customize, and deploy as online forms. Encrypted submission storage, e-signature, and a path to a signed BAA. Free to import; the Jotform HIPAA plan is where compliance actually lives.
Are there free HIPAA-compliant forms I can actually use?
Yes: the templates on this page are free to import into Jotform. The forms themselves enforce HIPAA-safe defaults (encrypted storage, PHI field controls, stripped email notifications). The HIPAA compliance layer requires a Jotform Gold plan or Enterprise with a signed BAA ($99/month billed annually). The templates save you the build time; the plan gives you the compliance.
Source: WorkflowKits /hipaa/free-hipaa-forms : by Buri (Mustafa Burak Ilter), former Jotform engineer (2020-2025).
The kits, ready to install in your account.
Each kit deploys into your own Jotform HIPAA account. No middleware, no platform fees, no vendor lock-in. Pricing covers the build and a window of support.
- Healthcare · HIPAA
HIPAA Patient Intake Kit
General HIPAA patient intake: identity, history, insurance, consent, e-signature.
View the kit - Healthcare · HIPAA
HIPAA Therapy Intake Kit
Therapy intake with screening, telehealth preference, sliding-scale fees, consent.
View the kit - Healthcare · HIPAA
HIPAA Telehealth Pre-Visit Kit
Pre-visit telehealth: identity, tech check, screening, e-consent.
View the kit - Healthcare · HIPAA
HIPAA Wellness & PHI Consent Kit
Wellness intake: health history, treatment consent, photo release.
View the kit
Four things, all of them load-bearing.
The Jotform HIPAA plan covers the platform side. The other three pillars are on you - and they are where almost every audit finding comes from.
- BAA in place
- The signed Business Associate Agreement with Jotform: the legal foundation. Without it, you do not have HIPAA compliance no matter what features you turn on.
- Integrations audited
- Every downstream tool that touches a submission (Zapier, Google Sheets, your CRM, your email tool) has to be HIPAA-aware too. One non-compliant Zap leaks the whole setup.
- PHI out of notifications
- Default Jotform email notifications often include the submission body. On HIPAA workflows, those go in the email itself. We strip PHI from notifications and route reviewers back to authenticated Jotform views.
- Access locked down
- Individual accounts, 2FA, role-based permissions on Enterprise. Shared logins are the most common audit finding we see. They are also the easiest to fix.
The full HIPAA loop, not just a form.
- Import any template on this page into your Jotform account in one click
- Customize fields, branding, and conditional logic for your practice
- Enable the Jotform HIPAA plan and sign the BAA
- Audit integrations and strip PHI from email notifications
- Deploy the form on your website or send the link directly to patients
- Run a pre-launch compliance check before going live
The notes that go deeper.
- Guide · 7 min
Jotform HIPAA: A Practical Setup Guide (From a Former Engineer)
If you handle protected health information, Jotform's HIPAA plan is the right starting point, but the plan alone doesn't make your workflow compliant. Here's what the plan covers, what it doesn't, and what most teams still get wrong.
Read the note - Guide · 9 min
HIPAA-Safe Jotform Integrations: What Breaks PHI, What Doesn't
The Jotform HIPAA plan covers Jotform. It does not cover what happens to a submission once it lands in Zapier, Google Sheets, Slack, or your CRM. Here is the integration-by-integration verdict from a Jotform HIPAA expert who built the integration codepath.
Read the note - Guide · 5 min
The 12-Item HIPAA Jotform Workflow Checklist (Pre-Launch)
Twelve items to check before any Jotform form that handles PHI goes live. If any of these are unchecked, the workflow is not ready. Save the page or copy the list into your decision log.
Read the note - Tutorial · 6 min
How to Get the Jotform BAA Signed: A Step-by-Step Walkthrough
The Jotform BAA is a 10-minute task once you know which screen to click. Here is the exact path: what to enable, what to ask for, and how to verify it actually got signed.
Read the note - Perspective · 8 min
Is Google Forms HIPAA Compliant? (Short Answer: Sort Of)
Google Forms on a free Gmail account is not HIPAA compliant. With a Google Workspace BAA and specific configuration changes, it can be made compliant. But it lacks clinical workflow features, e-signature, and integration audit trails. Here is the honest breakdown.
Read the note - Guide · 10 min
HIPAA-Compliant Form Builders: What to Actually Look For
Most form builders that advertise HIPAA compliance are telling you about one thing: they signed a BAA. A BAA is necessary but nowhere near sufficient. Here is what a compliant form setup actually requires, from a former Jotform engineer.
Read the note - Tutorial · 7 min
Jotform Email Notifications Not Working: Fix It in 10 Minutes
Jotform email notifications fail for six common reasons. Here is how to diagnose and fix each one in under 10 minutes.
Read the note
Questions, with straight answers.
Are these forms really free?
The templates are free to import and customize. The Jotform Gold plan ($99/month billed annually, $129 monthly) and Enterprise are where the compliance layer lives: encrypted storage, BAA, PHI controls. Bronze and Silver do not include HIPAA. Without the Gold plan, the forms still work as regular Jotform forms, but they are not HIPAA-compliant. The template saves build time; the Gold plan delivers compliance.
Can I use these forms without a Jotform HIPAA plan?
You can import and customize them on any Jotform plan. But if you collect protected health information, you need the HIPAA plan with a signed BAA. There is no compliant workaround for that.
Do these templates include e-signature consent?
Yes: every template includes an e-signature field for consent. Jotform's e-signature widget captures a drawn signature, a typed signature, or a click-to-sign agreement, all timestamped. The signature is stored with the submission under the HIPAA plan's encryption.
Can I customize the templates for my specialty?
Yes. Import the template, then add, remove, or reorder fields. Add conditional logic for specialty-specific questions. Change branding. The structure is a starting point, not a constraint.
How do I get the BAA?
The BAA is available inside your Jotform account once you upgrade to a HIPAA-tier plan. You sign it digitally; Jotform countersigns. The process takes about five minutes. WorkflowKits walks you through it as part of any engagement.
How Jotform compares.
Ready when you are.
Free 20-minute call. Bring your current Jotform setup (or a blank account); leave with a straight answer about what compliance actually requires for your practice.
Bring the work your team still does by hand.
One 20-minute call: how it runs today, what an agent or automation would change, and whether it is worth building.