Paperform is a no-code form builder that provides tools for creating forms, payment pages, and product pages.

With Paperform, businesses and individuals can build customized forms, collect payments, and create product listings without technical expertise. This helps organizations streamline data collection, simplify transactions, and design engaging forms.

Is Paperform HIPAA compliant? No, based on our research, Paperform is not HIPAA compliant.

 

What changed this year?

As of September 2026, our review did not identify any publicly disclosed changes to Paperform's HIPAA-related policies. Paperform continues to hold SOC 2 and GDPR compliance, as detailed on its Trust Centre, but does not offer HIPAA compliance or a BAA.

 

Will Paperform sign a business associate agreement (BAA)?

No, Paperform will not sign a business associate agreement, and therefore, it is not HIPAA compliant.

 

Conclusion

Paperform does not sign a BAA and is, therefore, not HIPAA compliant.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA ensures that healthcare providers and insurers can securely exchange electronic health information and imposes penalties for non-compliance.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities, which are entities that perform functions involving the use of PHI on behalf of a covered entity.