HIPAA-Compliant Clinical Assessments
200+ validated clinical assessments built for US practitioners. DSM-5 aligned ADHD assessments, standardized screening tools, and outcome measures — all with auto-scoring, US data residency, and neurodivergent-friendly design.
Built for HIPAA Compliance
ClientForms implements the administrative, physical, and technical safeguards required by the HIPAA Security Rule to protect your patients' health information.
Technical Safeguards
AES-256 encryption at rest, TLS 1.2+ in transit, unique user authentication, automatic session timeouts, and comprehensive audit logging for all PHI access.
Administrative Safeguards
Designated Privacy Officer, workforce training, risk assessments, incident response procedures, and Business Associate Agreements with all data handlers.
Physical Safeguards
US-region data centers with SOC 2 Type II certification, facility access controls, workstation security policies, and device and media controls for PHI protection.
200+ Clinical Assessments Available
Comprehensive assessment library covering psychology and allied health — from ADHD screening to outcome monitoring. All HIPAA-compliant with auto-scoring.
ADHD Assessment (DSM-5)
Full DSM-5 aligned diagnostic interview with criterion grouping and auto-scoring
Most PopularAQ-10 Autism Screening
Quick 10-item autism spectrum screening with validated cutoffs (88% sensitivity)
Free Test AvailableGAD-7 Anxiety
Generalized Anxiety Disorder 7-item scale (89% sensitivity, 82% specificity)
Free Test AvailablePHQ-9 Depression
Patient Health Questionnaire 9-item depression screen (88% sensitivity)
Free Test AvailableDASS-21
Depression, Anxiety, and Stress Scale — 21-item version with severity cutoffs
Outcome MonitoringK10 / CORE-10
Kessler Psychological Distress Scale and CORE Outcome Measure for routine monitoring
Outcome MonitoringUS Data Residency
Patient data from US practitioners is stored exclusively in US-region data centers. No PHI is transferred outside the United States.
Encryption at Rest
All patient data encrypted with AES-256 at rest in US-region infrastructure. Encryption keys managed through industry-standard key management services.
Encryption in Transit
TLS 1.2+ enforced on all connections. HSTS headers prevent protocol downgrade attacks. No unencrypted data transmission.
Access Controls
Role-based access control (RBAC), unique user authentication, automatic session timeouts, and multi-factor authentication support.
Audit Logging
Comprehensive audit trail for all PHI access and modifications. Logs retained for 6 years per HIPAA requirements.
Your Compliance Responsibilities
What ClientForms Handles
- US-region data storage and encryption (AES-256 at rest, TLS 1.2+ in transit)
- Business Associate Agreement with infrastructure providers
- Automatic session timeouts and access controls
- Audit logging for all PHI access
- Breach notification procedures per HIPAA requirements
- Regular security assessments and vulnerability scanning
- Secure backup and disaster recovery
Your Responsibilities
- Ensure your use of ClientForms is covered by your own HIPAA compliance program
- Obtain appropriate patient consent before administering assessments
- Use strong, unique passwords and enable MFA on your account
- Access patient data only on secure, authorized devices
- Report suspected security incidents to ClientForms promptly
- Maintain your own HIPAA policies and workforce training
- Sign the Business Associate Agreement for your organization
Frequently Asked Questions
Is ClientForms HIPAA compliant?
Where is my patient data stored?
Does ClientForms provide a Business Associate Agreement (BAA)?
What clinical assessments are available?
How does ClientForms handle breach notification?
Ready to try a different approach?
Quiet tools for focused work. Real impact for your patients.
No credit card required. Free tier includes 10 assessments.