Quick answer
Choose a HIPAA-capable form builder around the paperwork your team needs to collect, review, and keep—and the eligible plan and business associate agreement (BAA) that support that process. This guide compares Jotform for broad form building and approvals, Cognito Forms for custom logic and review, Formstack for connected form, document, and signing processes, and FormDr for clinic intake with assisted setup.
PlatoForms brings existing PDFs and new web forms into that comparison. Patients can complete an original-layout online form or a mobile-friendly web form that fills the PDF, sign online, and enter shared details once for several documents. Staff can add review steps and configure where completed PDFs are saved. The sections below compare these capabilities alongside plan costs, HIPAA activation, and BAA requirements so you can choose a setup that fits your practice.
How to Compare These Form Builders
This shortlist compares form builders for small and midsize US organizations by form creation, signing and review, PDF output, staff access, and HIPAA setup. The numbered entries are a reading order, not a scored ranking. Several products support the same tasks; the table highlights useful starting points rather than exclusive capabilities.
A vendor’s HIPAA offering is one part of your process. HHS guidance on cloud computing explains that cloud use involving electronic protected health information requires an appropriate business associate agreement and compliance with the applicable HIPAA rules. Review access, notifications, exports, and connected services as part of that process.
| Builder | Form and document capabilities | HIPAA setup | Price in USD |
|---|---|---|---|
| Jotform | Broad web forms and approvals | Gold or Enterprise; activate HIPAA and arrange the BAA | Gold: $1,188/year ($99/month equivalent), or $129 monthly |
| Cognito Forms | Custom logic and review workflows | Paid Enterprise organization and BAA | Published Enterprise pricing; confirm the applicable rate at checkout |
| Formstack | Forms, document generation, and signing | Forms or Suite plus HIPAA add-on | Quote including the HIPAA add-on and required products |
| PlatoForms | Existing PDFs or new web forms; conditional logic, online signing, optional signature certificates, approval workflows, and shared answers across PDFs | Silver or Gold; activate the team and obtain the BAA | Silver: $360/year ($30/month equivalent), or $36 monthly; 20 live forms, 10,000 submissions/month, 20 members |
| FormDr | Clinic intake with assisted form conversion | Signed BAA included | Core from $99/month, billed annually |
PlatoForms Silver includes signing, Workflow, and cloud-drive integration alongside its form and team allowances. Optional signature certificates provide supporting signature records; follow the certificate setup guide for your invitation or workflow setup.
Prices are in USD. HIPAA coverage requires the eligible account setup and applicable BAA.
1. Jotform: Broad Form Building and Approvals
Jotform suits organizations that need several kinds of forms, including patient intake. It offers a template-based builder, approval workflows, and Smart PDF output.
Its HIPAA pricing lists Gold and Enterprise as eligible. Gold is an individual account; distinguish staff administering the system from people participating in approvals. Check the Enterprise arrangement if you need multiuser administration.
Budget for Gold or Enterprise if you will collect PHI. Our PDF-focused Jotform comparison also covers shared account access and document handling.
2. Cognito Forms: Logic and Review Workflows
Cognito Forms deserves a trial when branching questions, calculated values, and internal review are central to the process. Its plan comparison includes workflows and approvals, with HIPAA availability on Enterprise.
The HIPAA support guide requires a paid Enterprise organization and a BAA; a trial is insufficient. It also describes restrictions on support access to form data.
Lower plans do not include HIPAA eligibility. Enterprise has published subscription prices, rather than quote-only pricing. At this review, the pricing page displayed more than one Enterprise rate; confirm the rate and billing period applicable to your organization at checkout.
3. Formstack: Coordinated Form and Document Processes
Formstack is worth evaluating when several departments need collection, document generation, and signing under an organizational rollout. Its Healthcare & HIPAA Guide directs buyers to support or an account representative for the healthcare setup.
Formstack’s plan comparison lists HIPAA as an add-on for Forms and Suite. Suite includes document generation, approval routing, and e-signatures; the basic Forms tier does not include those capabilities.
Request a Formstack quote that includes the products and HIPAA add-on you need. The base Forms price does not cover the full document and signing package.
Check its healthcare-compatible integrations before planning a downstream connection. An integration available on an ordinary account may require a different configuration for PHI.
4. PlatoForms: Forms, Document Design, and Existing PDF Packets
PlatoForms lets patients complete an existing PDF in its original layout or through a mobile-friendly web form whose answers populate the original PDF. For new paperwork, PDF Document Creator supports creating and editing document designs, exporting fillable PDFs, and turning the design into an online form. You can also build a new web form without starting from a PDF.
For a new patient form, PlatoForms’ health and medical templates offer questions and layouts you can adapt to your practice. Review the wording against your approved paperwork and complete the HIPAA setup below before collecting PHI.
A patient can complete and sign online, with optional signature certificates for supporting records. Use Workflow to pass forms to staff for review, additional details, or signatures. Master Forms lets the patient enter shared information once to populate several linked PDFs, reducing repeated entry across an intake and consent packet.
Conditional logic adapts questions to the patient’s answers, while invitation and workflow reminders help follow up on incomplete steps. Completed PDFs can be sent automatically to a configured cloud-drive folder. For PHI, review the destination’s access controls and applicable BAA before enabling delivery.
For setup, PlatoForms offers AI field detection on an uploaded blank packet, AI Form Generator for a new web form, and AI-generated conditional rules. Its AI form translation suggests translated labels and messages for review. Staff should check generated questions, mappings, and translations against the practice’s approved paperwork.
Price and eligibility: Silver is $30/month billed annually ($360/year), or $36 monthly, with 20 live forms, 10,000 submissions/month, and 20 members. Follow the HIPAA activation process for the team and obtain the BAA before collecting PHI. Buying Silver alone does not activate coverage for every team on an account.
PlatoForms can reduce repeated data entry across existing paperwork. It does not replace a clinical record or billing system. Before sending a packet to patients, check the mapped fields and where the completed PDFs will be saved.
For HIPAA teams, Voice Filling and MCP-connected AI assistants are off by default, and their processing is outside PlatoForms’ BAA. AI in Insights supports report questions and summaries, but HIPAA teams must explicitly consent before aggregated data is sent to a third-party AI provider. A HIPAA-enabled form account does not automatically extend its coverage to every AI feature.
5. FormDr: Clinic Forms with Assisted Setup
FormDr focuses on medical intake. Its current plan page lists assisted conversion of existing paperwork, form packets, and a signed BAA among the included services. Core starts at $99/month with annual billing.
Assisted conversion suits clinics without time to rebuild their forms. The pricing page advertises included conversion, but its FAQ also lists conversion and training charges. Confirm what is included for your packet and any one-time setup costs in writing. Pricing depends on patient volume and the organization’s needs. Ask which records an EHR connection transfers, in which direction, and on which plan.
Which HIPAA-Compliant Forms Will You Collect?
Bring the actual paperwork to the comparison. A short contact request, an intake questionnaire with attachments, and a consent packet can require different form features. List the fields, files, and staff handoffs your process needs, then compare how each eligible plan handles them. A builder with the right BAA arrangement may still need substantial configuration for your particular packet. For forms that use an existing PDF layout, include the generated document in the review rather than judging only the web form.
Choosing HIPAA-Compliant Online Forms for an Existing Website
You can add a PlatoForms form to your existing clinic website so patients can complete it online. An existing PDF can remain visible during completion, or you can use a mobile-friendly web form that fills the PDF. After HIPAA activation, update existing embed scripts and sharing links as directed in the activation guide.
Use the same requirements to evaluate each provider. This setup checklist shows how PlatoForms addresses them; it does not imply that other builders lack these capabilities.
| What to compare | What to check with each provider | How it works in PlatoForms |
|---|---|---|
| HIPAA eligibility | Which plan, activation steps, and BAA are required? | Silver or Gold; the Team Admin requests HIPAA activation, and the signed BAA is emailed after the upgrade. Coverage applies to the activated team. |
| Patient completion | Can patients complete the form on your website, with answers saved in the required PDF layout? | Embed an online form with the original PDF layout or responsive questions that populate the PDF. Use the updated embed after HIPAA activation. |
| Staff access | Can form editing and access to submitted patient data be assigned separately? | Per-form permissions separately control form editing, form submission, and viewing/exporting entries. Restrict viewing and exporting patient data to authorized staff. |
| Signing and review | Can patients sign and staff complete a review step? | Patients can sign online; Workflow routes forms to staff for decisions, notes, or signatures. Optional signature certificates provide supporting signing records when configured. |
| Email notifications | What data or attachments leave the form account? | Configure notification content and PDF attachments. For PHI, check both the recipient email service and access through included links; disable unsuitable notifications or sharing options. |
| Completed PDF storage | Can PDFs reach the required destination automatically? | Cloud Drive integration saves generated PDFs to Google Drive, Dropbox, OneDrive, or Box. Review the destination’s access and applicable BAA separately. |
| Retention | How long are submissions kept, and who manages external copies? | The retention guide specifies “Forever” for HIPAA accounts. Establish your backup policy and manage exported copies separately. |
Test the embedded form with sample data, including a signature and any staff review step. Confirm who can open the submission and where the completed PDF is saved. A free account can help you explore form creation; use an eligible, activated team with its BAA in place before collecting PHI.
For appointment reminders, practice-system integration, and other clinic-specific requirements, compare the patient intake software shortlist alongside these general form builders.
Check the Complete PHI Path
Before selecting a builder, identify who can open submissions, whether notifications contain patient information, where PDFs are copied, and which external services receive data. Review each applicable service and BAA with the people responsible for your organization’s compliance.
For PlatoForms specifically, the HIPAA documentation calls out email and third-party integration considerations. A cloud folder or email address is not automatically covered by the form provider’s BAA. Avoid putting real PHI into a public AI tool while testing a workflow.
For additional context, see our HIPAA guide and HIPAA-enabled online forms.
Frequently asked questions
Why consider PlatoForms for HIPAA-enabled PDF forms?
PlatoForms turns existing PDFs into online forms with the original layout or mobile-friendly questions that populate the PDF. It also supports new web forms. Patients can sign online and enter shared details once for several linked PDFs through Master Forms. Your team can configure Workflow to send forms to staff for review, additional information, or signatures, reducing repeated entry and manual handoffs.
Which PlatoForms plans support HIPAA-enabled teams?
Silver and Gold support HIPAA-enabled teams. The Team Admin requests activation for the relevant team; PlatoForms emails the signed BAA after the upgrade. Activate the team and obtain the BAA before collecting PHI. Connected email, storage, and other external services require separate review.
How can AI help prepare patient forms in PlatoForms?
Use AI field detection to identify fields on blank intake PDFs, or AI Form Generator to draft a new web form from a description. AI can also suggest conditional rules and translations. This gives your team a starting point to review and adapt to the clinic’s approved paperwork. Use blank documents and sample data during setup, then complete HIPAA team activation and obtain the BAA before collecting patient information.
Try PlatoForms with Your Clinic’s Paperwork
Turn your existing intake PDFs into online forms, customize a healthcare template, or use AI to draft a new web form or design a PDF document. Choose the original PDF layout or mobile-friendly questions for online completion.
Let patients fill and sign online, reuse shared details across several PDFs with Master Forms, and connect staff review steps through Workflow. You can also configure completed PDFs to save automatically to your connected cloud storage.
Create your account and explore with blank paperwork and sample data. Before collecting PHI, complete Silver or Gold team activation, obtain the BAA, and review any connected services.
