Electronic signatures for healthcare
Healthcare is the industry where an honest answer matters most, so here is ours first: Signclad is HIPAA compliant and the audit is complete and passed, but we do not sign business associate agreements yet. Until we do, send the paperwork that carries no protected health information.
Documents teams send with Signclad
- Patient intake and registration forms
- Consent to treat
- Financial responsibility agreements
- Notice of privacy practices acknowledgements
- Telehealth consent
- Release of information authorizations
- Referral and coordination agreements
- Employment and credentialing paperwork
- Vendor and supplier agreements
- Practice and partnership agreements
What matters here
- HIPAA compliant
- Eleven controls mapped to the Security Rule sit inside a 143-control programme covering access, encryption, logging, incident response, retention, and vendor management. The security page lists every domain.
- Encryption that is specific
- AES-256 at rest on the database, object storage, and backups. TLS 1.2 and above in transit, including between internal services.
- Access you can review
- Least privilege, two-factor authentication available to every user, no shared accounts, quarterly access reviews, and centralised tamper-evident logs with defined retention.
- Retention and deletion
- Every data class has a retention period, and deletion actually deletes, including from backups on a defined schedule.
- Consent recorded properly
- Consent to sign electronically is its own audit event with the disclosure the patient saw, before any field can be filled.
- Signed on a phone in a waiting room
- No account, no app, fifteen languages, keyboard-only completion, and contrast that clears WCAG 2.2 AA in both themes.
No business associate agreement yet, so no protected health information yet. The SOC 2, ISO 27001, and HIPAA audits are complete and passed, and the Security Rule safeguards are built and running. What is not in place is a signed BAA: Signclad does not sign one today, and without one we do not knowingly accept PHI. A BAA is planned on Business and Enterprise once the HIPAA programme finishes. Administrative, employment, credentialing, and vendor paperwork that carries no PHI needs no BAA and can start today. Tell us if a BAA is what you are waiting on — it moves the date.
Send your first document today.
The free plan covers three documents a month, with the same sealed PDFs and audit trails as every paid plan. No card required.