HIPAA-Compliant Clinical Assessments
200+ validated clinical assessments built for US practitioners. DSM-5 aligned ADHD assessments, standardized screening tools, and outcome measures — all with instant scoring, US data residency, and neurodivergent-friendly design.
Built for HIPAA Compliance
ClientForms implements the administrative, physical, and technical safeguards required by the HIPAA Security Rule to protect your patients' health information.
Technical Safeguards
AES-256 encryption at rest, TLS 1.2+ in transit, unique user authentication, automatic session timeouts, and comprehensive audit logging for all PHI access.
Administrative Safeguards
Designated Privacy Officer, workforce training, risk assessments, incident response procedures, and Business Associate Agreements with all data handlers.
Physical Safeguards
US-region data centers with SOC 2 Type II certification, facility access controls, workstation security policies, and device and media controls for PHI protection.
200+ Clinical Assessments Available
Comprehensive assessment library covering psychology, occupational therapy, and allied health — from ADHD screening to OT functional assessments and outcome monitoring. All HIPAA-compliant with instant scoring.
ADHD Assessment (DSM-5)
Full DSM-5 aligned diagnostic interview with criterion grouping and instant scoring
Most PopularAQ-10 Autism Screening
Quick 10-item autism spectrum screening with validated cutoffs (88% sensitivity)
Free Test AvailableGAD-7 Anxiety
Generalized Anxiety Disorder 7-item scale (89% sensitivity, 82% specificity)
Free Test AvailablePHQ-9 Depression
Patient Health Questionnaire 9-item depression screen (88% sensitivity)
Free Test AvailableDASS-21
Depression, Anxiety, and Stress Scale — 21-item version with severity cutoffs
Outcome MonitoringK10 / CORE-10
Kessler Psychological Distress Scale and CORE Outcome Measure for routine monitoring
Outcome MonitoringMeasurement-Based Care Made Simple
Fewer than 20% of behavioral health clinicians use routine outcome measurement — yet research shows it significantly improves client outcomes. ClientForms makes it easy.
Track Progress Over Time
Administer PHQ-9, GAD-7, or DASS-21 at intake and regular intervals. Auto-scored results show whether treatment is working.
Document for Payers
Insurance companies increasingly require measurable outcomes. Scored assessments provide the documentation you need.
No EHR Switch Required
Add outcome tracking to your existing workflow. Send assessments via link, email, or tablet — results are scored instantly.
Free to Start
10 scored responses per month on the free tier. No credit card, no commitment — try it with your next client.
US Data Residency
Patient data from US practitioners is stored exclusively in US-region data centers. No PHI is transferred outside the United States.
Encryption at Rest
All patient data encrypted with AES-256 at rest in US-region infrastructure. Encryption keys managed through industry-standard key management services.
Encryption in Transit
TLS 1.2+ enforced on all connections. HSTS headers prevent protocol downgrade attacks. No unencrypted data transmission.
Access Controls
Role-based access control (RBAC), unique user authentication, automatic session timeouts, and multi-factor authentication support.
Audit Logging
Comprehensive audit trail for all PHI access and modifications. Logs retained for 6 years per HIPAA requirements.
Your Compliance Responsibilities
What ClientForms Handles
- US-region data storage and encryption (AES-256 at rest, TLS 1.2+ in transit)
- Business Associate Agreement with infrastructure providers
- Automatic session timeouts and access controls
- Audit logging for all PHI access
- Breach notification procedures per HIPAA requirements
- Regular security assessments and vulnerability scanning
- Secure backup and disaster recovery
Your Responsibilities
- Ensure your use of ClientForms is covered by your own HIPAA compliance program
- Obtain appropriate patient consent before administering assessments
- Use strong, unique passwords and enable MFA on your account
- Access patient data only on secure, authorized devices
- Report suspected security incidents to ClientForms promptly
- Maintain your own HIPAA policies and workforce training
- Sign the Business Associate Agreement for your organization
Frequently Asked Questions
Is ClientForms HIPAA compliant?
Where is my patient data stored?
Does ClientForms provide a Business Associate Agreement (BAA)?
What clinical assessments are available?
How does ClientForms handle breach notification?
What is measurement-based care and how does ClientForms support it?
Do I need to switch my EHR to use ClientForms?
Ready to try a different approach?
Quiet tools for focused work. Real impact for your patients.
No credit card required. Start with 3 forms and 10 patient responses.