Skip to main content
Handled in line with PIPEDA

Clinical Assessments, Handled in Line with PIPEDA

260+ validated clinical assessments for Canadian psychologists, therapists, and counsellors. Personal information handled in line with PIPEDA and its Fair Information Principles — encryption, access controls, and honest cross-border disclosure at signup.

Fair Information Principles
AES-256 Encryption
Cross-Border Disclosed at Signup
Free to Start
Start Free — No Credit CardBrowse All Assessments

Built Around the Fair Information Principles

PIPEDA is built on ten Fair Information Principles. ClientForms is designed to help you meet them — with strong safeguards, openness about how data is handled, and clear disclosure of where it is processed.

Fair Information Principles

Practices aligned to PIPEDA’s ten principles — meaningful consent, limiting collection to what a clinical assessment needs, safeguards proportionate to sensitivity, openness, and accountability.

Cross-Border Transparency

Canadian data is processed in the United States. PIPEDA permits transfer to a processor in another country where comparable protection is in place — and we disclose the US location at signup so consent is informed.

Provincial Health Privacy

Provincial law may add requirements on top of PIPEDA — for example PHIPA in Ontario or Law 25 in Quebec. You stay in control of meeting your own provincial and college obligations; we give you the transparency to do it.

260+ Clinical Assessments Available

A comprehensive library for Canadian psychologists and therapists — from ADHD and autism screening to routine outcome monitoring. All with instant scoring and handled in line with PIPEDA.

ADHD Assessment (DSM-5)

Full DSM-5 aligned diagnostic interview with criterion grouping and instant scoring

Most Popular

AQ-10 Autism Screening

Quick 10-item autism spectrum screening with validated cutoffs (88% sensitivity)

Free Test Available

GAD-7 Anxiety

Generalised Anxiety Disorder 7-item scale (89% sensitivity, 82% specificity)

Free Test Available

PHQ-9 Depression

Patient Health Questionnaire 9-item depression screen (88% sensitivity)

Free Test Available

DASS-21

Depression, Anxiety, and Stress Scale — 21-item version with severity cutoffs

Outcome Monitoring

PCL-5 / DERS-16

PTSD Checklist for DSM-5 and the Difficulties in Emotion Regulation Scale (short form)

Outcome Monitoring
Try free self-tests →Learn about measurement-based care →View all 260+ forms →

Where Your Data Is Stored

Canadian clinical data is hosted in the United States, encrypted end to end. Under PIPEDA, personal information may be processed by a service provider in another country where comparable protection is in place — and we disclose that location so your consent is informed.

Encryption at Rest

All clinical data encrypted with AES-256 at rest. Encryption keys managed through industry-standard key-management services.

Encryption in Transit

TLS enforced on all connections, with HSTS to prevent protocol-downgrade attacks. No unencrypted data transmission.

Access Controls

Role-based access control, unique user authentication, automatic session timeouts, and multi-factor authentication support.

Audit Logging

An audit trail for access to and changes of clinical records, supporting the accountability and safeguards principles.

Data-residency note. Because clinical data is hosted in the United States, ClientForms is intended for private-practice clinicians. It is not designed for British Columbia or Nova Scotia public-sector bodies whose legislation requires personal information to be stored within Canada.

Shared Privacy Responsibilities

What ClientForms Handles

  • Encryption of clinical data (AES-256 at rest, TLS in transit)
  • Disclosure of US cross-border processing at signup
  • Automatic session timeouts and access controls
  • Audit logging for access to clinical records
  • Breach handling and OPC reporting where a real risk of significant harm arises
  • Regular security assessments and vulnerability scanning
  • Secure backup and disaster recovery

Your Responsibilities

  • Obtain meaningful client consent, including for out-of-province processing where your provincial law requires it
  • Meet your own PIPEDA, provincial (e.g. PHIPA, Law 25), and regulatory-college obligations
  • Use strong, unique passwords and enable MFA on your account
  • Access client data only on secure, authorised devices
  • Report suspected security incidents to ClientForms promptly
  • Maintain your own privacy policies and records of consent

Questions about your rights under PIPEDA can be directed to the Office of the Privacy Commissioner of Canada (OPC).

Frequently Asked Questions

Is ClientForms PIPEDA compliant?
ClientForms handles personal information in line with PIPEDA (the Personal Information Protection and Electronic Documents Act) and its ten Fair Information Principles — consent, limiting collection, safeguards, openness, and accountability among them. PIPEDA has no formal certification or accreditation scheme, so no provider can be "PIPEDA certified"; we describe our practices honestly and disclose where your data is processed so your consent is informed.
Where is my clinical data stored?
Canadian account and clinical data is stored securely in the United States, on the same infrastructure that serves our US clinicians. Under PIPEDA, personal information may be processed by a service provider in another country where comparable protection is in place — we disclose the US location at signup so your consent is informed. Data is encrypted at rest with AES-256 and in transit with TLS.
What about provincial health-privacy law like PHIPA or Quebec’s Law 25?
Provincial rules (for example PHIPA in Ontario or Quebec’s Law 25) may add requirements on top of PIPEDA — including consent, safeguards, and in some cases notice of out-of-province processing. You remain responsible for meeting your own provincial and regulatory-college obligations. ClientForms is intended for private-practice clinicians; it is not designed for BC or Nova Scotia public-sector bodies that require personal information to be stored within Canada.
How does ClientForms handle a privacy breach?
We follow PIPEDA’s breach-of-security-safeguards rules. Where a breach poses a real risk of significant harm, we report to the Office of the Privacy Commissioner of Canada (OPC) and notify affected individuals as soon as feasible, and keep records of breaches as required. You can also raise a privacy concern directly with the OPC.
What clinical assessments are available for Canadian practitioners?
Over 200 validated instruments covering depression (PHQ-9), anxiety (GAD-7), PTSD (PCL-5), ADHD (DSM-5 diagnostic interview, ASRS), autism (AQ-10), eating behaviours (EAT-26), emotion regulation (DERS-16), and more. All with instant scoring, clinical severity bands, and neurodivergent-friendly design.
Do I need to switch my EMR to use ClientForms?
No. ClientForms works alongside your existing EMR. Send assessment links to clients by email or waiting-room tablet, get instant scored results, and export Assessment Summaries as PDFs for your records — no duplicate data entry and no integration required.

Ready to try a different approach?

Quiet tools for focused work. Real impact for your patients.

Setup in 2 minutes
Cancel anytime
Email support
Start your free 30 days

Full Professional access for 30 days, no card. Then a free plan with 3 forms and 10 responses.

Or try a free self-test →