How we make this list: we compare pricing pages, product documentation and public user reviews. Ratings come from G2, Capterra or Trustpilot, with the date we checked them.
Key takeaways
- A form tool is only HIPAA ready for your use when the vendor signs a Business Associate Agreement, known as a BAA, for the plan you buy.
- Jotform Gold is the cheapest self-serve path to a signed BAA found in this guide, at 99 dollars per month billed annually.
- Cognito Forms, FormAssembly and Formstack all gate HIPAA features to higher tiers or paid add-ons, so the lowest advertised price is not the HIPAA price.
- GoCanvas, Device Magic and TrueContext are field forms tools first, so ask each vendor in writing whether it will sign a BAA for your plan before you collect patient data.
- GovOS, formerly SeamlessDocs, is not listed here, because its site now presents it as Neumo, a government platform, with no published HIPAA BAA.
A tool is HIPAA compliant for your use only when the vendor signs a Business Associate Agreement that covers the service, encrypts protected health information in transit and at rest, and keeps audit logs. Marketing language about secure forms does not meet that test. The US Department of Health and Human Services states that a covered entity must have a BAA in place before a business associate handles protected health information on its behalf.
Jotform Gold is the cheapest self-serve HIPAA option in this guide, at 99 dollars per month billed annually, or 129 dollars per month on monthly billing. Cognito Forms Enterprise is next at 129 dollars per month billed annually. Formstack starts at 99 dollars per month, but HIPAA is a paid add-on, so the total cost is higher than the headline price. FormAssembly publishes no prices at all, so it cannot be ranked on price.
Choose a general form builder when patients fill in forms on your website, by email link, or in a waiting room on a shared device. Jotform, Cognito Forms, FormAssembly, Formstack and 123FormBuilder fit that pattern, with templates for intake, consent, registration and referrals. Choose a field forms app when staff collect data away from the clinic, often offline, on a phone or tablet. GoCanvas, Device Magic and TrueContext fit that pattern, with photo capture, signatures, GPS and dispatch.
Check five things before you collect patient data. First, get the signed BAA and confirm it names your plan. Second, turn on HIPAA features in the account settings, because some vendors leave them off by default. Third, check where data is stored, who can export it, and how long it is kept. Fourth, test the e-signature flow for consent forms, including what the patient sees and what audit record is kept. For related buying guides, see our best HIPAA compliance software guide, our best HIPAA compliant CRM software guide, and our best EMR EHR software guide.
How we picked
We checked each vendor pricing page or, where it did not render prices, third-party pricing reports dated September to November 2026, and we recorded which plan carries HIPAA features and a BAA. Prices and BAA terms were checked on 12 November 2026. Where a price rests on search results only, the tool section says so. This guide is not legal advice.
Last verified: 12 November 2026
| Tool | Best for | Starting price | Free plan |
| Jotform | Small to mid-size practices that want a self-serve BAA | $34 per month billed annually | Yes, Starter free |
| Formstack | Regulated teams that need forms, documents and signing | $99 per month (third-party reported) | No free plan, 14-day trial |
| Cognito Forms | Intake with calculations and staff review | $19 per month billed annually | Yes, Individual free |
| FormAssembly | Large Salesforce teams with audit needs | Quote | No free plan, 14-day trial |
| GoCanvas | Field teams collecting forms offline | $29 per user per month billed annually | No free plan, free trial |
| Device Magic | Field teams that need offline mobile forms | Quote | No free plan shown on vendor pricing page |
| 123FormBuilder | High-volume forms with Salesforce links | $37 per month (third-party reported) | Yes, Basic free |
| TrueContext (formerly ProntoForms) | Field service teams with dispatch needs | $15 per user per month (third-party reported) | No free plan, free trial |
Quick comparison
| Tool | Best for | Starting price | Free plan |
|---|
 Jotform | Small to mid-size practices that want a self-serve HIPAA setup with a signed BAA | $34 per month billed annually for Bronze; HIPAA on Gold at $99 per month billed annually or $129 per month billed monthly | Yes, Starter plan free with 5 active forms and 100 submissions per month |
 Formstack | Regulated teams that want forms, document generation and e-signatures in one suite | $99 per month (third-party reported); $83 per month billed annually | No free plan; 14-day free trial of Forms, no card required |
 Cognito Forms | Intake forms with calculations, branching logic and staff review steps | $19 per month billed annually for Pro; HIPAA on Enterprise at $129 per month billed annually or $174 per month billed monthly | Yes, Individual plan free with unlimited forms and 100 entries per month |
 FormAssembly | Large healthcare and higher education teams that run Salesforce and need strict audit controls | quote | No free plan; 14-day trial, no card required |
 GoCanvas | Field teams that collect inspection, home visit or outreach forms offline on mobile devices | $29 per user per month billed annually for Essentials, 3-user minimum | No free plan; free trial available |
 Device Magic | Field teams that need offline mobile forms with photo, signature and GPS capture | quote | No free plan shown on the vendor pricing page opened 12 November 2026; third-party listings mention a free version, so confirm this with the vendor |
 123FormBuilder | Healthcare teams that need high-volume forms with Salesforce integration at a published price | $37 per month (third-party reported) for Gold; Diamond at $99 per month (third-party reported) | Yes, Basic plan free with 5 forms and 100 submissions per month |
 TrueContext (formerly ProntoForms) | Field service teams that need dispatch, workflows and analytics on mobile forms | $15 per user per month (third-party reported) for Essentials; Advanced at $45 per user per month (third-party reported) | No free plan; free trial available |
Is your product missing or out of date?
We review this list regularly. Vendors can request a listing, send updated pricing or ask about featured placement.
#1Jotform
Best for: Small to mid-size practices that want a self-serve HIPAA setup with a signed BAA4.7/5 on
G2 (5,415 reviews, checked Oct 2026)
Visit jotform.com
Starting price$34 per month billed annually for Bronze; HIPAA on Gold at $99 per month billed annually or $129 per month billed monthly
Free planYes, Starter plan free with 5 active forms and 100 submissions per month
Jotform is the most practical choice for most clinics because the HIPAA path is published and self-serve. Its pricing page, opened on 12 November 2026, states that HIPAA features are available on Gold and Enterprise plans only, and covered-entity customers with HIPAA features enabled can sign a BAA. Gold includes 100 forms, 10,000 submissions per month and 100 GB of upload storage. The main weakness is cost at the point of compliance, since a practice that only needs a few intake forms still pays the full Gold price to get the BAA.
What we like- HIPAA features and a BAA are available on Gold without a sales call
- Large template library for intake and consent forms
- Built-in e-signatures and payment collection
Watch out for- The jump from Silver at 49 dollars per month to Gold at 129 dollars per month is steep for a solo practice, and lower plans cannot hold protected health information at any price
#2Formstack
Best for: Regulated teams that want forms, document generation and e-signatures in one suite4.0/5 on
Capterra (129 reviews, checked Oct 2026)
Visit formstack.com
Starting price$99 per month (third-party reported); $83 per month billed annually
Free planNo free plan; 14-day free trial of Forms, no card required
Formstack sells HIPAA as a paid add-on on its Forms and Suite plans and includes it on Enterprise, according to NexHealth checks published in October 2026. Its pricing page was opened on 12 November 2026, but the price figures did not render, so the 99 dollar starting price here is third-party reported. The Suite plan bundles forms, documents and signing, which suits consent workflows that end in a signed document. Ask Formstack to quote the HIPAA add-on in writing and to confirm which plan the BAA will name.
What we like- Strong fit for Salesforce workflows
- Formstack Sign covers consent signatures
- Audit trails and field-level security on HIPAA accounts
Watch out for- HIPAA is a paid add-on on the Forms and Suite plans with no published add-on price, so the true HIPAA cost is not visible before a sales conversation
#3Cognito Forms
Best for: Intake forms with calculations, branching logic and staff review steps4.6/5 on
G2 (163 reviews, checked Oct 2026)
Visit cognitoforms.com
Starting price$19 per month billed annually for Pro; HIPAA on Enterprise at $129 per month billed annually or $174 per month billed monthly
Free planYes, Individual plan free with unlimited forms and 100 entries per month
Cognito Forms is a strong pick when intake forms need maths, such as fee estimates or scoring. Its pricing page was opened on 12 November 2026 and lists HIPAA compliance on the Enterprise plan only, at 129 dollars per month billed annually, with unlimited entries, 20 users and single sign-on. Its HIPAA guidance requires a paid Enterprise organisation and a BAA, and states that a trial is not eligible for HIPAA use. Use sample data only during a trial. The free Individual plan must never be used for protected health information.
What we like- Unlimited entries on Enterprise, so high-volume intake does not raise the bill
- Strong calculation and workflow features
- E-signatures included from Pro
Watch out for- HIPAA is gated to the top Enterprise plan, so a small team pays for 20 users and 100 GB of storage just to reach compliance
#4
FormAssembly
Best for: Large healthcare and higher education teams that run Salesforce and need strict audit controls
Visit formassembly.com
Starting pricequote
Free planNo free plan; 14-day trial, no card required
FormAssembly is the most compliance-heavy tool in this guide, and its pricing page, opened on 12 November 2026, lists Collect, Automate, Enterprise and Gov Cloud plans with no prices shown. Third-party comparisons checked in September 2026 report that FormAssembly withdrew its published 59 dollar entry price in 2026 and now routes every plan to a demo request. HIPAA with a BAA is reported on the Atlas Enterprise tier. That makes it a good fit for a hospital or university with a procurement process, and a poor fit for a small clinic that wants a price today.
What we like- Broad compliance coverage, including HIPAA with a BAA, PCI DSS Level 1, SOC 2 and FedRAMP High on Gov Cloud
- Deep Salesforce integration
- Workflow approvals and multi-party signing
Watch out for- No published prices on any plan, so every buyer must go through a demo or sales conversation to learn the cost
#5GoCanvas
Best for: Field teams that collect inspection, home visit or outreach forms offline on mobile devices4.3/5 on
G2 (77 reviews, checked Oct 2026)
Visit gocanvas.com
Starting price$29 per user per month billed annually for Essentials, 3-user minimum
Free planNo free plan; free trial available
GoCanvas is built for field work rather than patient-facing web intake. Its pricing page was opened on 12 November 2026 and lists Essentials at 29 dollars, Pro at 39 dollars and Max at 49 dollars per user per month, all billed annually with a 3-user minimum. Third-party sources list HIPAA compliance on higher tiers, but those reports disagree on the exact tier. Treat GoCanvas as unconfirmed for protected health information until the vendor confirms in writing that it will sign a BAA for your plan. If that confirmation is given, its offline access and dispatch features suit home visits well. If it is not given, use it only for forms that contain no patient data.
What we like- Offline mobile access, photo capture and dispatch on every plan
- Unlimited forms and submissions
- Simple per-user pricing with a 3-user minimum
Watch out for- The vendor pricing page opened on 12 November 2026 does not state which plan carries HIPAA features or a BAA, so a healthcare buyer cannot confirm compliance from the pricing page alone
#6
Device Magic
Best for: Field teams that need offline mobile forms with photo, signature and GPS capture
Visit devicemagic.com
Starting pricequote
Free planNo free plan shown on the vendor pricing page opened 12 November 2026; third-party listings mention a free version, so confirm this with the vendor
Device Magic replaces paper forms with mobile forms for inspections, audits and incident reports, and it works well where staff have no signal. Its pricing page was opened on 12 November 2026 and shows only Max and Enterprise, both marked as quote only, billed annually with a 3-user minimum. Older third-party listings quote a Professional plan at 25 dollars per device per month, but that figure does not match the current vendor page, so this guide does not rely on it. Third-party comparisons report HIPAA and BAA availability as an Enterprise-grade option, so ask for the BAA and the price in writing before use. The per-device model also needs care, because a team with many occasional users can pay for devices it rarely uses.
What we like- Offline data capture on iOS and Android
- Custom PDF and Word output on paid plans
- Integrations with cloud storage, Slack, Salesforce and SQL on higher tiers
Watch out for- The vendor pricing page now shows Max and Enterprise as quote only, with no published numbers, and HIPAA is listed by third parties as an Enterprise add-on with HIPAA enabled servers rather than a standard plan feature
#7
123FormBuilder
Best for: Healthcare teams that need high-volume forms with Salesforce integration at a published price
Visit 123formbuilder.com
Starting price$37 per month (third-party reported) for Gold; Diamond at $99 per month (third-party reported)
Free planYes, Basic plan free with 5 forms and 100 submissions per month
123FormBuilder replaces GovOS in this guide, because GovOS, formerly SeamlessDocs, now presents itself as Neumo, a government platform, with no published price and no published HIPAA BAA for healthcare use. G2 and other 2026 sources report Gold at 37 dollars, Platinum at 49 dollars, Diamond at 99 dollars and Enterprise from 225 dollars per month. Its vendor pricing page could not be opened from the link tried on 12 November 2026, so all prices here are third-party reported. Get the BAA and the plan name in writing first.
What we like- Diamond allows 200 forms and 100,000 submissions per month
- Strong Salesforce integration
- ISO 27001 and ISO 9001 certification reported by the vendor
Watch out for- Sources disagree on the HIPAA tier, with some 2026 comparisons placing HIPAA on Diamond at 99 dollars per month and others placing certified HIPAA on Enterprise from 225 dollars per month, so the BAA plan must be confirmed in writing
#8
TrueContext (formerly ProntoForms)
Best for: Field service teams that need dispatch, workflows and analytics on mobile forms
Visit truecontext.com
Starting price$15 per user per month (third-party reported) for Essentials; Advanced at $45 per user per month (third-party reported)
Free planNo free plan; free trial available
TrueContext is the current name for ProntoForms, which rebranded in 2022, and its homepage was opened on 12 November 2026. The site presents it as a field intelligence platform for service teams, and it reports more than 100,000 users. Third-party pricing reports list Essentials at 15 dollars and Advanced at 45 dollars per user per month, with Enterprise on quote, but the vendor homepage we opened did not show those prices, so they are third-party reported here. No source checked confirms that TrueContext will sign a HIPAA BAA. Ask the vendor directly about a BAA, data residency and offline storage before any patient data is collected. For billing and intake workflows that sit alongside field work, see our top 10 medical billing software guide.
What we like- Unlimited forms and submissions on paid plans
- Dispatch, workflows and conditional logic
- Strong fit for asset and safety inspections
Watch out for- No published BAA or HIPAA plan was found in the sources checked for this guide, so a healthcare buyer cannot treat it as HIPAA ready without written vendor confirmation
Frequently asked questions
Is Jotform HIPAA compliant?
Yes, Jotform is HIPAA compliant on its Gold and Enterprise plans, where HIPAA features can be enabled and a BAA can be signed. Starter, Bronze and Silver plans do not include HIPAA features. Gold costs 99 dollars per month billed annually. You must enable HIPAA features and sign the BAA before collecting protected health information.
Do I need a BAA even if the form tool encrypts my data?
Yes, you need a signed BAA before a vendor handles protected health information on your behalf, even if the tool encrypts data in transit and at rest. Encryption is a safeguard, not a contract. Without a BAA, the vendor is not bound by the HIPAA terms that apply to your practice. Get the agreement signed and keep a copy with your compliance records.
What is the cheapest HIPAA compliant forms tool?
Jotform Gold is the cheapest self-serve HIPAA option in this guide, at 99 dollars per month billed annually. Cognito Forms Enterprise is next at 129 dollars per month billed annually. Formstack starts lower on paper, but HIPAA is a paid add-on with no published price, so its total is higher. Always compare the HIPAA tier price, not the lowest advertised price.
Can I use a free plan for patient intake forms?
No, you should not use a free plan for patient intake forms. Free plans at Jotform, Cognito Forms and 123FormBuilder do not include a BAA, and HIPAA features are not available on those tiers. A free form that collects a name, a diagnosis or a medication is still collecting protected health information. Use the free plan only for non-clinical forms.
How do e-signatures work on HIPAA compliant forms?
E-signatures on HIPAA compliant forms let a patient sign a consent or registration form online, with the signature, the form data and an audit record stored together. Jotform, Formstack Sign, Cognito Forms and FormAssembly all offer e-signatures, but the signature feature alone does not make a form HIPAA compliant. The account must be on a HIPAA tier and the BAA must be signed.
Sources we checked (12)
- https://www.jotform.com/pricing/
- https://www.cognitoforms.com/pricing
- https://www.formstack.com/pricing
- https://www.formassembly.com/pricing/
- https://www.gocanvas.com/pricing
- https://www.devicemagic.com/pricing
- https://www.truecontext.com/
- https://www.govos.com/
- https://www.nexhealth.com/resources/hipaa-compliant-form-builder?topics
- https://formester.com/blog/best-hipaa-form-builders/
- https://www.g2.com/products/123formbuilder/pricing
- https://www.hhs.gov/sites/default/files/model-business-associate-agreement.pdf
Is your product missing or out of date?
We review this list regularly. Vendors can request a listing, send updated pricing or ask about featured placement.
Shihab Mia · Founder, Rankite
Shihab has 5+ years in B2B and SaaS SEO. He writes Rankite's software buying guides from pricing pages, documentation and public user reviews. More about Shihab.