Skip to main content
BAA Directory

Is FormDr HIPAA compliant? Does it sign a BAA?

The answer

Signs a BAA

Yes. FormDoctor, the patient intake software once styled FormDr, says a signed Business Associate Agreement is included with every plan.

Forms and landing pages. Checked on the vendor's own pages on .

Collecting patient details in a form? Curve Forms are HIPAA-hosted intake and lead forms with the ad that brought each person attached, covered by Curve Compliance's BAA on every plan. Book a call

On this page

What FormDoctor says

“Signed Business Associate Agreement (BAA) included with every plan.”

Source: FormDoctor Facts for AI (Trust signals), checked .

“A Business Associate Agreement is included with your service.”

Source: FormDoctor, HIPAA Compliant Online Forms (HIPAA Compliant Form Builder), checked .

What this means for ad tracking

Intake and lead forms collect what a patient types, such as the service they want, their symptoms, their insurance and how to reach them. The form tool that holds those answers needs a BAA, and the ad tags on the form page need to stay away from them.

FormDoctor describes itself as “the intake layer that sits in front of the EHR a practice already uses” (FormDoctor), and says “All patient form submissions are encrypted in transit and rest” (FormDoctor). It also says the name FormDr refers to the same company and product (FormDoctor). Its BAA covers the intake data FormDoctor handles for you.

A BAA binds only the vendor that signs it. This directory lists Meta and Google Ads as not signing one, so form conversions sent to them need to leave PHI behind.

Curve Compliance's HIPAA intake forms, Curve Forms, are hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached. Form events reach Meta, Google Ads and your other destinations server-side, and form answers are never sent. Book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own. To compare form builders, see our guide to HIPAA compliant forms.

How Curve helps

  • Curve Forms are HIPAA intake and lead forms hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Does FormDr sign a BAA?

Yes. FormDoctor, as FormDr is now styled, says: “Signed Business Associate Agreement (BAA) included with every plan” (FormDoctor), and its home page says “A Business Associate Agreement is included with your service” (FormDoctor). We checked FormDoctor's own pages on November 9, 2026.

Is FormDr HIPAA compliant?

FormDoctor sells HIPAA compliant online intake forms with a signed BAA included, and says it “is a defined Business Associate or subcontractor according to HIPAA regulations and the specific customer relationship” (FormDoctor). How you set up your forms, and what you connect them to, is still your responsibility, so talk to your counsel about your own setup.

Are FormDr and FormDoctor the same?

Yes. FormDoctor says its brand was standardized to “FormDoctor”, that its website domain remains formdr.com, and that “Both names refer to the same company and product” (FormDoctor).

Does FormDr's BAA cover my Meta or Google Ads tracking?

No. A BAA binds only the vendor that signs it, so FormDoctor's BAA covers the intake data FormDoctor handles, not Meta or Google. This directory lists Meta and Google Ads as not signing a BAA, so a form conversion needs to reach them without PHI. Curve Compliance signs its own BAA with you on every plan.

What does Curve Compliance offer for intake forms?

Curve Forms are HIPAA intake and lead forms hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached. Form events reach your ad platforms server-side without form answers, so the platforms learn from your leads without seeing what patients typed. To compare form builders side by side, see our guide to the best HIPAA compliant form builders. Book a call to see it on your own funnel.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with FormDoctor before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call