Is SimplePDF HIPAA compliant?
Yes. Healthcare organizations handle sensitive patient data every day, from intake forms to prior authorizations. When choosing a PDF editor, HIPAA compliance matters.
Processing: always in the browser
SimplePDF processes all PDFs directly in your browser, on every plan. No document content is sent to SimplePDF servers during editing.
Storage: depends on your plan
Without Bring Your Own Storage, completed files are stored in SimplePDF storage.
With Bring Your Own Storage (BYOS), completed documents are uploaded directly from the browser to your own storage using presigned URLs. Nothing is stored by SimplePDF.
BYOS supports S3, Azure Blob Storage, and SharePoint. It is available starting from the Pro plan.
Submission names and PHI
Naming submissions is the one exception to browser-only processing. When you set a field as the submission name, that field's value is stored on SimplePDF servers, even with BYOS, and is included in the notification email when email notifications are on. For sensitive workflows, pick a non-PHI field as the name (an internal reference, a case number) or leave submissions unnamed.
BAA
A Business Associate Agreement is available upon request. Contact us to discuss your compliance requirements.
Built for healthcare workflows
SimplePDF is used by healthcare organizations for common workflows like patient intake forms, referral forms, prior authorizations, and insurance claims. You can embed the editor directly into your EHR or patient portal.
Learn more on our healthcare use case page.
That's it! SimplePDF processes documents in the browser, and with BYOS, completed files go straight to your own storage.
If you have any questions, feel free to reach out to support@simplepdf.com