HIPAA-compliant patient intake forms need two things: a vendor that signs a Business Associate Agreement with your practice, and software that protects patient data the whole way from the patient’s phone to your chart. Mira Operations includes a signed BAA on every account, encrypts patient data, logs staff access, and writes completed intake into your EHR. It is built for orthopedic private practice, so the forms go beyond collecting answers: returning patients confirm instead of re-entering, coverage is checked in real time, and every submission prints as a clean PDF that matches your real forms.
What makes intake forms HIPAA compliant
A HIPAA-compliant intake workflow checks four boxes:
- A signed BAA. Any vendor that stores or processes patient information on your behalf is a business associate. Without a signed BAA, collecting PHI on their platform is a compliance problem regardless of how secure it looks.
- Encryption. Patient data is protected in transit and at rest.
- Access control and logging. Only the right staff see submissions, and access is recorded.
- Appropriate handling downstream. Submissions should not end up in unprotected email inboxes, spreadsheets, or personal drives.
That last point is where general form builders get hard to manage. A compliant submission that is then emailed around, exported to a spreadsheet, or retyped into the EHR by hand creates new places for errors and exposure.
The general form builder problem
Many practices start on a general-purpose form builder because it is familiar and cheap. The catch is how HIPAA is packaged.
Based on publicly available information as of October 2026, Jotform includes HIPAA features only on its Gold plan ($129 a month, or $99 a month billed yearly) and Enterprise plan; Starter, Bronze, and Silver do not include them. Jotform’s HIPAA page says a signed BAA is available to covered entities that have enabled HIPAA features, and it describes its product as HIPAA-enabled or HIPAA-friendly forms. Jotform is a capable form builder, and on the right plan it can collect patient data compliantly.
What the plan does not change is the category. After the patient hits submit, a form builder stops. Staff still read each submission and type it into the EHR, check insurance by hand, and ask returning patients for the same information again next visit.
Digital patient intake software vs a form builder
| Capability | General form builder | Mira Operations |
|---|---|---|
| Signed BAA | Higher-priced plans only (varies by vendor) | Every account |
| Returning patients | Re-enter everything | Confirm and correct with Mira Passport |
| Questions asked | Every field, every patient | Dynamic form asks only what this visit needs |
| Insurance | Typed as text | Card photo capture plus real-time eligibility |
| Reminders | Email notifications, often manual | Text and email with links back to the form |
| Into the chart | Export, then retype | Writes into your EHR (native integrations with Epic, athenahealth, ModMed, eClinicalWorks, NextGen, and DrChrono) |
| Output | Generic PDF export | PDFs that match your real forms |
| Save and resume, kiosk, voice | Varies | Included |
Orthopedic intake forms built for how ortho patients arrive
Orthopedic intake is not one form. A new knee patient, a post-op shoulder follow-up, and a workers’ comp injury need different questions.
Dynamic forms. Mira asks only the questions each visit needs. A knee-instability complaint gets knee questions and never sees the shoulder questionnaire. Patients finish faster and abandon fewer forms.
Mira Passport. Returning patients confirm a code by text or email, their demographics, insurance, and history load in, and they change only what is new. The record carries across visits, so the longer a practice uses Mira, the less intake there is to do.
Workers’ comp and injury details. Employer, claim number, adjuster, and injury date are captured once at intake, then reused when the carrier’s paperwork arrives. Mira fills workers’ comp, FMLA, and disability PDFs from the chart for staff review, at $5 per completed form.
Insurance up front. Patients photograph their insurance card, and eligibility and benefits run in real time days before the visit, so prior authorization requirements and copays surface while there is still time to act.
Every way patients finish. Patients can type or speak their answers, save and resume from a link, or finish on a waiting-room kiosk. Reminders go out by text and email.
Your forms, your brand. Upload a PDF or a photo of your current packet and Mira rebuilds it as a digital form in about a minute. Every submission prints as a PDF that matches your real paperwork: surgery reservations, workers’ comp, clearance letters, referrals.
Into the EHR, not into an inbox
Completed intake writes into the patient record. Mira integrates natively with Epic, athenahealth, ModMed, eClinicalWorks, NextGen, and DrChrono, and builds new EHR integrations in one to four weeks. Nobody retypes a date of birth or an allergy list, which removes one of the most common sources of chart errors at the front desk.
Compliance details
Every Mira account includes a signed BAA. Patient data is encrypted, staff access to records is logged, and the AI features run on models that do not train on patient data. Mira Operations is part of Mira, the AI operating system for orthopedic practices, alongside Concierge, Scribe, and RCM, so the same protections cover the whole patient workflow.
Switching from Jotform or paper
Switching is mostly a rebuild, and Mira does the rebuilding. Photograph or export each current form, Mira recreates it, and your team adjusts wording where needed. Practices typically move their packet over in an afternoon. Bring one of your forms to a demo and watch it rebuilt live. No long term lock in is required to start.