Is SimplePDF HIPAA compliant?

Benjamin André-Micolon

Yes. SimplePDF can be used in HIPAA-compliant workflows.

SimplePDF works as a HIPAA-compatible PDF filler: you fill and sign forms in your browser, and the information you enter is processed on your device, not on SimplePDF servers. Unlike hosted PDF fillers that keep your documents on their servers, the free editor lets you fill PHI-containing forms without the finished document being stored by SimplePDF.

SimplePDF is designed so that Protected Health Information (PHI) stays under your control. Healthcare organizations already use it for patient intake, referrals, prior authorizations, and insurance claims because the architecture itself limits exposure. Learn more on our healthcare use case page.

#Processing: always happens in the browser

On every plan, including the free editor, SimplePDF processes PDFs entirely in the user's browser. No document content is sent to SimplePDF servers while someone is filling, signing, or modifying a form.

Because the document stays in the browser during editing, SimplePDF has no server-side copy of the PDF to access or expose.

#Storage: you decide where completed files go

On the free editor, the finished document stays on the user's device (download or print). SimplePDF does not receive or store the PDF.
On paid plans without Bring Your Own Storage, completed files are stored by SimplePDF.
With Bring Your Own Storage (BYOS), completed documents are uploaded directly from the browser to storage you own, using presigned URLs. The Pro plan supports S3 and Azure Blob Storage; the Premium plan adds SharePoint. SimplePDF never stores the file.

The free editor can be used in HIPAA-compliant workflows without BYOS because SimplePDF never receives or stores the PDF. For paid workflows involving PHI, use BYOS so completed documents go directly to your own storage.

#Submission names and PHI

If you name a submission after a form field, that field value is stored by SimplePDF and can appear in notification emails. For paid workflows involving PHI, choose a non-sensitive identifier, such as a case number or internal reference, or leave the submission unnamed.

#Business Associate Agreement

A BAA is available upon request for organizations that require one. Contact us to discuss your workflow and compliance requirements.

#Built for real healthcare workflows

SimplePDF is already embedded in EHRs and patient portals. Teams use it for the everyday paperwork that must stay secure: intake forms, consent documents, referral packets, prior authorizations, and claims. See healthcare workflows.