SmplFormsTrust & security
Built to be trusted with sensitive data.
If you're going to put real information into a form, you should know how it's handled. Here's the short, honest version.
A HIPAA Business Associate
Durga-Dagda Technologies LLC signs a Business Associate Agreement before any Protected Health Information flows through the platform. Ask and we'll send it.
Each organization kept apart
Every organization's data is isolated from every other's, and that isolation is checked by automated tests on every change.
Encrypted and audited
Encryption in transit and at rest, role-based access, and an audit trail of who did what and when that cannot be edited.
Uploads scanned
Files people upload are scanned for malware before anyone can open them.
No keys lying around
The platform reaches the services it depends on with short-lived identities rather than stored passwords or keys wherever those services allow it.
Where it runs
The platform runs on Microsoft Azure in the United States; email and text messages are sent through Amazon Web Services. Both are covered by business associate agreements. A current subprocessor list is available on request.
Security reviewers and prospective customers can request our security overview, subprocessor list and a BAA through Contact. See also our Privacy Policy.