HIPAA POST

While there are many form builder apps available, they often restrict your design and user experience. With HIPAA Post, you can confidently accept PHI on web forms without handling it directly, all while maintaining full creative control.

Here's how it works:  Your front-end sends a simple POST to our secure backend, and that's it.  We handle the rest, ensuring that your PHI remains safe and compliant.  We take care of signing the BAA, so you can focus on what matters to you.

Not Another Login

We understand that remembering multiple passwords or logging into different portals can be a hassle. That's why we've made it easy for medical staff to access information—it arrives directly to their email.

Our system delivers information directly to the practice email server or service, ensuring that PHI remains safe and is only unencrypted on systems covered by the BAA.

We can either work directly with practice IT, or guide you on what to ask for so you can manage the client relationship. We offer ready-made support for Office 365 and Google Workspace using modern OAUTH authentication, as well as generic username/password and OAUTH drivers.

Guaranteed Delivery

Messages are promptly accepted and queued in our industry-standard Message Queue Server. This lock-step process ensures that even if systems are temporarily offline, your messages are safely stored and automatically re-attempted later.

Because our system sends from an internal account, messages won't be bothered by spam filters, guaranteeing smooth delivery of your messages.

Product Status

HIPAA Post has been mothballed due to limited market demand. In practice, many prospective customers believed that “sendmail.php on a shared host” was already sufficiently secure, which made the market for a specialized service like this quite small.

The technology remains available, and we’re open to partnerships, self-hosted deployments, or projects based on the platform.