HIPAA compliant e-signature software and what to ask before you sign forms

Start free to test your forms with ten documents.

What HIPAA asks of an e-signature vendor

There is no official HIPAA certificate for software. When a vendor creates, receives, keeps or sends protected health information for a covered entity, it acts as a business associate.

The covered entity and the vendor then sign a business associate agreement. 45 CFR 164.504(e) lists what that agreement must say.

• The vendor uses the information only as the agreement allows.
• The vendor uses safeguards to prevent other uses.
• The vendor reports any use or disclosure the agreement does not allow.
• Subcontractors that handle the data agree to the same limits.
• The vendor returns or destroys the data when the contract ends, where feasible.

Health forms that can be signed electronically

Many documents a clinic signs carry no health information at all. Staff agreements, vendor contracts and office leases fall under the same e-signature laws as any business.

What a valid signature on a health form needs

1. 1Intent. The patient chooses to sign, with a clear action.
2. 2Consent to sign electronically. The patient agrees to use an electronic record.
3. 3Identity. The record shows who signed and how they were reached.
4. 4Integrity. The signed form cannot change without detection.
5. 5Retention. The clinic keeps the form for the period its state requires.

These come from the ESIGN Act and state UETA laws. HIPAA adds its own content rules for an authorization, such as an expiration date and the right to revoke.

How SignSolú handles each one

• Intent. The signer draws a signature and presses «Sign and Send».
• Consent. A line next to that button records consent, with a link to the disclosure.
• Identity. The link goes to the phone number or email you entered. The certificate records the IP address of each step.
• Integrity. The certificate prints a SHA-256 hash of the signed file.
• Retention. Each signed form stays in your organization archive.

Before you send forms that carry protected health information, ask SignSolú for a business associate agreement. Write to the team from your account and it will confirm what applies to your use.

Signing on the patient phone

Patients fill intake forms in the waiting room or at home. With SignSolú the clinic sends the link by WhatsApp or email before the visit.

The patient taps the brown bar at the bottom that says «Sign as …» and draws once. They can attach an insurance card or an ID in the same step.

Contracts the practice signs

Clinics sign many contracts that have nothing to do with patient data. Employment contracts, confidentiality agreements, supplier agreements, equipment rentals and office leases.

Those go through SignSolú like any other contract. Templates keep the clauses consistent and the archive keeps every signed copy with its end date.

Checklist before you choose a vendor

1. 1List which forms carry protected health information and which do not.
2. 2Ask each vendor for a business associate agreement for the first group.
3. 3Confirm the signed record shows who signed, when and how they were reached.
4. 4Confirm you can export each signed form as a PDF.
5. 5Set how long your state asks you to keep each form.

Start with the forms that carry no health data. Staff agreements and vendor contracts move to electronic signature first, with no extra paperwork.

Before the first visit

Send the intake packet the day the appointment is booked. The patient signs at home, the front desk checks the name and the visit starts on time.

Forms in English and Spanish

Many clinics serve patients who read Spanish first. SignSolú works in both languages, so each patient signs a form they understand.

A consent the patient understood is easier to defend than one they signed to get past the front desk.

What a HIPAA authorization must contain

An authorization to use or disclose health information has required elements. The signature itself can be electronic, but the content must be complete.

• A specific description of the information to be used or disclosed.
• Who may disclose it and who may receive it.
• The purpose of the disclosure.
• An expiration date or event.
• The right to revoke in writing and how to do it.
• The signature of the patient or a representative, and the date.

The patient gets a copy of the signed form. SignSolú sends the signed PDF to every signer when all have signed.

What the audit certificate shows

Every document signed in SignSolú ends with a certificate page. It turns a drawn signature into evidence you can show a bank, a court or the other party.

• The name of the sender and of each signer.
• The phone number or email where each link went.
• The date and time of each step, from sending to the last signature.
• The IP address each signer used.
• The SHA-256 hash of the signed file.

The hash works like a fingerprint. Change one comma in the PDF and the fingerprint no longer matches the one on the certificate.

What the signer sees on a phone

The signer opens the link and sees the document at full width. They scroll and read it like any page on the web.

A brown bar stays at the bottom of the screen with the words «Sign as» and their name. One tap opens a box to draw the signature.

They draw once with a finger and press «Sign and Send». SignSolú places that signature in every spot the document needs. Then it shows a confirmation and sends the signed copy when everyone is done.

Start in five minutes

1. 1Create a free account with your email. No card is needed.
2. 2Upload a contract you already use, or open a template.
3. 3Mark where each person signs and fills in data.
4. 4Send it to yourself first to see what the signer sees.
5. 5Send it to the real signers and watch each one sign.

Your ten free documents include every feature of the paid plan. When they run out, the plan starts only if you choose it.

Pricing

Each document counts once, however many people sign it. You can cancel anytime. See the full pricing page.

Templates for clinics

• HIPAA release form
• Medical consent form
• Consent form
• Confidentiality agreement
• Medical power of attorney form

Start free. Your first 10 documents are free, then the SignSolú plan costs USD 22.99 a month.