前言介紹
- 這款 WordPress 外掛「HIPAA FORMS – Add HIPAA Compliant Webforms to Your WordPress Website」是 2017-12-26 上架。
- 目前有 900 個安裝啟用數。
- 上一次更新是 2025-03-26，距離現在已有 37 天。
- 外掛最低要求 WordPress 5.4 以上版本才可以安裝。
- 有 8 人給過評分。
- 還沒有人在論壇上發問，可能目前使用數不多，還沒有什麼大問題。
外掛協作開發者
外掛標籤
hipaa forms | health forms | secure forms | gravity forms | medical forms |
內容簡介
HIPAA FORMS外掛可讓您使用Caldera Forms或Gravity Forms創建網頁表單，就像創建簡單的聯繫表單一樣。在外掛管理介面的表單旁邊有個簡單的勾選框，可立即接管您的表單，將表單裝飾成HIPAA合規標記和簽名欄位。用戶可以通過在觸控屏上用手指簽名或拖動滑鼠進行簽名。提交後，數據將被加密並推送到HIPAA FORMS服務API，然後存儲在HIPAA合規存儲解決方案中。
擁有登錄憑據和適當的用戶角色（管理員或hipaa）的用戶可以登錄您的WordPress管理儀錶板，搜索/查看提交的表單，甚至生成加密且受密碼保護的PDF文件以供打印或保存到硬盤。
以下是HIPAA FORMS服務和集成WordPress外掛保護您的表單中的受保護健康信息的方法：
1.提交時整個表單都會加密，需要2個分開的密鑰才能解密。
2.一旦表單數據加密，它會將加密數據發送到HIPAA FORMS服務API，在HIPAA合規存儲解決方案中保持加密。
3.當有登錄憑據的人以管理員或hipaa用戶角色登錄您的WordPress管理儀錶板後，該用戶可以轉到HIPAA FORMS插件界面，查看已提交的表單。雖然您可以在此處查看已解密的表單，但數據實際上從未離開HIPAA FORMS服務器，您僅是從API中提取數據，進行解密並在瀏覽器中查看，數據實際上從未觸及您的主機服務器。
4.數據離開HIPAA FORMS服務器的唯一方式是點擊“生成PDF”按鈕和創建加密受密碼保護的PDF文件。此時，您可以打印或將PDF保存到硬盤中，但由於PDF仍然是加密和受密碼保護的，因此表單數據在傳輸過程中仍然安全。
5.一旦關閉PDF生成窗口，PDF文件就會在HIPAA FORMS服務器上被刪除，從而消除任何破壞性行為者獲取文件的機會。
6.每當用戶訪問HIPAA FORMS插件管理界面時，都會創建並存儲日誌記錄在HIPAA FORMS服務器上，您可以隨時從HIPAA FORMS插件界面檢查。這是HIPAA法規所要求的，以確保任何潛在的數據泄漏都可以找到根源。
7.由於表單數據已加密並存儲在HIPAA FORMS服務器數據庫中，因此我們確保受保護的數據不會被任何人篡改或更改。
8.需要SSL憑證和用戶與Code Monkeys LLC（開發和維護HIPAA FORMS服務和WordPress插件的公司）之間的BAA協議。只有滿足這些要求後，才能啟用提交或查看表單的功能。
V1.5.5新功能：
自從發布以來，版本1.5.5是我們第一個“重要”的外掛升級。此更新包括改進的用戶界面和以下特定表單設置：
1.顯示/隱藏簽名欄位的選項
2.提交表單後顯示成功消息或重定向URL的選項
3.設置誰可以查看已提交的表單，具體選項如下：
A.所有帶有admin/hipaa用戶角色的用戶
B.僅特定用戶
C.只有表單中選擇的特定醫生/用戶（即，患者在表單中選擇特定醫生，只有該醫生才能看到提交的表單）。注意：管理員可以看到所有表單，不受設置影響。
雖然我們相信我們已經使整個過程變得盡可能簡單，但我們也知道有時可能會有問題或問題，我們會盡力解決。
原文外掛簡介
The HIPAA FORMS plugin allows you to create web forms using Caldera Forms or Gravity Forms just like you would a simple contact form. A simple checkbox next to the form within the plugin admin interface instantly takes over your form, appends the form with a HIPAA Compliant badge and signature field where users can sign by dragging their mouse or with their finger on touch screens, and upon submit encrypts the data and pushes it to the HIPAA FORMS Service API which then stores it within a HIPAA Compliant storage solution.
Users with login credentials and the appropriate user roles (administrator or hipaa) can then log into your WordPress administrator dashboard and search/view the submitted forms and even generate an encrypted and password protected PDF file of the form which can then be printed or saved to a hard drive.
Here’s how the HIPAA FORMS Service and integrated WordPress plugin secures the protected health information of your forms:
1. On submit the entire form is encrypted requiring 2 separate keys to decrypt.
2. Once the form data is encrypted it sends the encrypted data to the HIPAA FORMS Service API where it remains encrypted on a HIPAA Compliant storage solution.
3. When someone with login credentials logs into your WordPress administrator dashboard with either and administrator or hipaa user role that user can then go to the HIPAA FORMS plugin interface and view the forms that have been submitted. While you can view the decrypted forms here the data never actually leaves the HIPAA FORMS Service servers, you’re simply pulling them from the api, decrypting and viewing in your browser, the data never actually touches your hosting server.
4. The only way the data can leave the HIPAA FORMS Service servers is if you click the “generate pdf” button and create an encrypted password protected pdf file. At this point you can print or save the pdf to your hard drive but since the pdf remains encrypted and password protected the form data remains safe in transit.
5. Once you close the pdf generation window the pdf file is then destroyed on the HIPAA FORMS Service server removing any chance of a bad actor gaining access to the file.
6. Each time a user accesses the HIPAA FORMS plugin admin interface a log entry is created and stored on the HIPAA FORMS Service which you can review at any time from the HIPAA FORMS plugin interface. This is required by HIPAA Regulations to ensure any potential data breach can be back-traced.
7. Since the form data is encrypted and remains on the HIPAA FORMS Service database we ensure that protected data can not be tampered with and changed by anyone.
8. Both a SSL certificate and a BAA agreement between the user and Code Monkeys LLC (the company that developed and maintains the HIPAA FORMS Service and WordPress plugin) is required. The ability to submit or view forms is disabled until both of these requirements have been met.
NEW IN V1.5.5:
Version 1.5.5 is our first “major” update to the plugin since releasing it. This update includes an improved user interface and the following specific form settings:
1. Option to show/hide the signature field
2. Option to specify a success message or a redirect url after a form is submitted
3. Option to set who can see the submitted forms with the following options:
A. All users with admin/hipaa user role
B. Only specific users
C. Only a specific doctor/user selected within a form (ie. Patient selects a specific doctor in a form, only that doctor will see the submitted form). NOTE: Admins see all forms regardless of settings.
While we believe we’ve made the entire process as simple as possible we also understand that there may be questions or issues sometimes that the user needs addressed. Given the urgency and importance of a service such as this we’ve built a complete support ticket system directly into the HIPAA FORMS WordPress plugin interface to allow the users to submit and track support tickets without ever needing to leave their own administrator dashboard. The HIPAA FORMS Service team at Code Monkeys LLC strives to respond to tickets within 1 business day. Users can also call Code Monkeys LLC directly for support between 9am and 5pm CST.
NOTE: A subscription-based license key to access the HIPAA FORMS Service API is required from https://www.hipaaforms.online in order to submit and view forms (a free version is available, no credit card required). Your website must also have SSL enabled (url should show https://).
Web Designer Friendly
We know that the owners or board members of dental clinics, health clinics, hospitals and insurance agencies aren’t the ones that will be implementing this service. It’s YOU, the web designers and developers that have the task of finding a solution and making it work.
Our initial primary goal was to build a solution for our own website builds so we’ve done everything we can to make the installation, setup and implementation of this service as seamless and efficient as possible. If you can build a contact form with Caldera Forms you can build HIPAA Compliant web forms with our service, in fact once you have the plugin setup and build the form all you really need to do is check a box and your form is instantly compliant.
We also want to ensure that YOU have the knowledge and ability to protect both yourself and your client. While we require your client to sign a BAA agreement with us we don’t require that the web designer/developer have a BAA in place but we STRONGLY recommend it. A BAA agreement protects your client, not you or us but it is actually REQUIRED according to HIPAA Regulations and without the BAA in place your client is not in compliance and may be violating both federal and state privacy laws. While YOU may not have a legal obligation to have a BAA in place with your client, as your client’s technical expert on all thing relating to their website have a moral obligation to make your client aware that a BAA agreement should be in place between you and them.
If you’re not an agency or freelance but work on the website directly for a company you should still ensure that your company has a BAA agreement in place for all employees and any 3rd party IT professionals that may have access to protected health information. Fines for violating HIPAA Regulations can be in the six figures and your company could be out of business leaving you looking for a new job if your company is not compliant.
Regardless of if you’re an agency, freelancer or work directly for a company that takes protected private health information, if you have any questions or need help with anything relating to compliance or how to put a BAA agreement in place between yourself and your client please don’t hesitate to submit a support ticket or give us a call.
Planned For Next Major Release
Finish form-specific history interface
Currently In Development Premium Add-Ons
Secure file upload
Secure save for later ability
Appointment manager
Improved Notes Interface/Functionality
Patient Communication Portal (Virtual Visit/HouseCall)
A) Real-Time 2-Way Messaging
B) Patient Access to Submitted Forms
C) Video E-Visit
各版本下載點
- 方法一：點下方版本號的連結下載 ZIP 檔案後，登入網站後台左側選單「外掛」的「安裝外掛」，然後選擇上方的「上傳外掛」，把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
- 方法二：透過「安裝外掛」的畫面右方搜尋功能，搜尋外掛名稱「HIPAA FORMS – Add HIPAA Compliant Webforms to Your WordPress Website」來進行安裝。
（建議使用方法二，確保安裝的版本符合當前運作的 WordPress 環境。
1.0 | 1.1 | 1.2 | 1.3 | 1.4 | 2.0 | 1.4.1 | 1.4.2 | 1.4.3 | 1.4.4 | 1.4.6 | 1.4.7 | 1.4.8 | 1.4.9 | 1.5.0 | 1.5.1 | 1.5.2 | 1.5.3 | 1.5.4 | 1.5.5 | 1.5.6 | 1.5.7 | 1.5.8 | 1.5.9 | 1.6.0 | 1.6.1 | 1.6.2 | 1.6.3 | 1.6.4 | 1.6.5 | 1.6.6 | 1.6.7 | 1.6.8 | 1.6.9 | 1.7.0 | 1.7.1 | 1.7.2 | 1.7.3 | 1.7.4 | 1.7.5 | 1.7.6 | 1.7.7 | 1.7.8 | 1.7.9 | 1.8.0 | 1.8.1 | 1.8.2 | 1.8.3 | 1.8.4 | 1.8.5 | 1.8.6 | 1.8.7 | 1.8.8 | 1.8.9 | 1.9.0 | 1.9.1 | 1.9.2 | 1.9.3 | 1.9.4 | 1.9.5 | 1.9.6 | 1.9.7 | 1.9.8 | 1.9.9 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.1.0 | 2.1.1 | 2.1.2 | 2.1.3 | 2.1.4 | 2.1.5 | 2.1.6 | 2.1.7 | 2.1.8 | 2.1.9 | 2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.8 | 2.2.9 | 2.3.0 | 2.3.1 | 2.3.2 | 2.3.3 | 2.3.4 | 2.3.5 | 2.3.6 | 2.3.7 | 2.3.8 | 2.3.9 | 2.4.0 | 2.4.1 | 2.4.2 | 2.4.3 | 2.4.4 | 2.4.5 | 2.4.6 | 2.4.7 | 2.4.8 | 2.4.9 | 2.5.0 | 2.5.1 | 2.5.2 | 2.5.3 | 2.5.4 | 2.5.5 | 2.5.6 | 2.5.7 | 2.5.8 | 2.5.9 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.6.7 | 2.6.8 | 2.6.9 | 2.7.0 | 2.7.1 | 2.7.2 | 2.7.3 | 2.7.4 | 2.7.5 | 2.7.6 | 2.7.7 | 2.7.8 | 2.7.9 | 2.8.0 | 2.8.1 | 2.8.2 | 2.8.3 | 2.8.4 | 2.8.5 | 2.8.6 | 2.8.7 | 2.8.8 | 2.8.9 | 2.9.0 | 2.9.1 | 2.9.2 | 2.9.3 | 2.9.4 | 2.9.5 | 2.9.6 | 2.9.7 | 2.9.8 | 2.9.9 | 3.0.0 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.1.0 | 3.1.1 | 3.1.2 | trunk | 1.8.9.1 |
延伸相關外掛（你可能也想知道）
MedForward Forms 》, - ,
- MedForward Forms 是一款方便的 WordPress 外掛，讓您可以在您的 WordPress 網站上展示MedForward托管的表單。只需要輸...。
PII Tokenizer 》**總結：** PII Tokenizer 是一個 WordPress 外掛，能夠幫助網站擁有者在表單中保護個人身分識別資訊（PII），如姓名、電子郵件、電話號碼和地址。此外，這個...。