6e260503d09d43808d2a204c1576a6b4Q: Are the forms HIPAA-compliant?
I see on the website you have a page dedicated to a medical form builder. Are your forms HIPAA-compliant (for people in the US)? Is there a BAA (Business Associate Agreement) we can sign?
Ankur_Kiwiform
Jul 23, 2026A: At the moment, KiwiForm is not yet fully HIPAA-compliant, and we do not currently offer a Business Associate Agreement (BAA).
HIPAA compliance is already on our roadmap, and we’re actively working toward it. Most of the required measures are in place, but there are still a few remaining items before we can officially support HIPAA-compliant workflows. We expect to offer this in the near future.
The medical form templates currently available in KiwiForm are intended for collecting general, non-sensitive information (such as appointment requests, patient inquiries, or other basic details). They are not intended for collecting Protected Health Information (PHI) or for use cases that require HIPAA compliance.
We’ll announce HIPAA support and BAA availability as soon as they are ready.
Thanks so much for replying and so quickly! So once it's in place, would the HIPAA/BAA support be available on all tiers (including the free one since I may send my clients there to sign up for their own accounts)? I understand that the forms aren't meant to collect PHI right now, but I'm finding that most of my clients would like HIPAA compliance even if it's just appointment requests.
To be completely transparent, we haven’t finalized this yet. We’re currently leaning toward offering HIPAA compliance and BAA support only on our highest-tier plan (Tier 3), while Free and lower tiers would remain for non-PHI use cases.
That said, nothing is finalized yet, and we’ll share more details as soon as we can.