Skip to main content
BAA Directory

Is Formsort HIPAA compliant? Does it sign a BAA?

The answer

Signs a BAA on specific plans

Yes, for enterprise clients. Formsort says it will sign a BAA with enterprise clients and lists HIPAA compliance on its Enterprise plan.

Forms and landing pages. Checked on the vendor's own pages on .

Collecting patient details in a form? Curve Forms are HIPAA-hosted intake and lead forms with the ad that brought each person attached, covered by Curve Compliance's BAA on every plan. Book a call

On this page

What Formsort says

“Yes, Formsort is HIPAA compliant and will sign a BAA with enterprise clients.”

Source: Formsort Pricing, FAQ, checked .

“When dealing with patient information, compliance with HIPAA regulations is essential. Formsort's Standard Business Associate Agreement (BAA) will help you protect your business.”

Source: Formsort, HIPAA-compliant form builder, checked .

“Formsort will sign a BAA with you to make sure you are compliant.”

Source: Formsort, How to send form data into Salesforce, checked .

What the BAA covers and excludes

Excludes or limits, in Formsort's words:

  • Data you send onward: “While we are HIPAA compliant, Formsort does not control the type of information you send to your backend and 3rd party tools.”

What this means for ad tracking

Intake and lead forms collect what a patient types, such as the service they want, their symptoms, their insurance and how to reach them. The form tool that holds those answers needs a BAA, and the ad tags on the form page need to stay away from them.

Formsort says it “will sign a BAA with enterprise clients” (Formsort). It also says “Formsort does not control the type of information you send to your backend and 3rd party tools,” and that its data classification lets you tag answer variables with PII so they are not sent to third-party integrations.

A BAA binds only the vendor that signs it. This directory lists Meta and Google Ads as not signing one, so form conversions sent to them need to leave PHI behind.

Curve Compliance's HIPAA intake forms, Curve Forms, are hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached. Form events reach Meta, Google Ads and your other destinations server-side, and form answers are never sent to an ad platform. Book a call to see it on your own funnel.

A business associate agreement binds only the vendor that signs it, so each vendor that handles patient information for you needs its own. To compare form builders, see our guide to HIPAA compliant forms.

How Curve helps

  • Curve Forms are HIPAA intake and lead forms hosted by Curve under the BAA Curve signs on every plan, with ad attribution attached.
  • Curve replaces browser ad pixels with one script and sends conversions server-side to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from Curve's servers.
  • Curve detects PHI-like patterns, such as condition names, form answers and emails in URLs, before data reaches an ad platform, and flags them so they can be stopped at the source.
  • Each platform receives only a fixed list of fields. Contact identifiers are off by default on Meta, Google Ads and TikTok, and events can use neutral names.
  • Event Logs show what Curve sent to each platform and what the platform accepted.
  • Curve signs a BAA on every plan, and Curve's team does the setup for you, typically live in about a week.

Book a call with Curve and Curve's team will walk through your tracking setup with you.

Frequently asked questions

Is Formsort HIPAA compliant?

Formsort says “Yes, Formsort is HIPAA compliant and will sign a BAA with enterprise clients” (Formsort). With a signed BAA, Formsort can handle patient answers for you, set up the way Formsort describes. The BAA does not cover ad pixels or tags on the same pages, because they send data to other companies.

Does Formsort sign a BAA on every plan?

Formsort's pricing page says it will sign a BAA with enterprise clients and lists HIPAA compliance on its Enterprise plan. Its HIPAA page refers to “Formsort's Standard Business Associate Agreement (BAA).” We checked Formsort's own pages on October 26, 2026.

Does a BAA with Formsort cover my ad pixels?

No. A BAA covers the data Formsort handles for you. A pixel sends data from the visitor's browser to Meta, Google or TikTok, and none of them is a party to your BAA with Formsort. Formsort also says it “does not control the type of information you send to your backend and 3rd party tools.”

What should I use for ad conversions on pages where Formsort runs?

Send the form conversion server-side, without the answers. Curve Compliance sends conversions to Meta, Google Ads, TikTok, Microsoft Advertising and LinkedIn from its servers with a fixed list of fields and neutral event names, and Curve Forms are hosted by Curve under the BAA it signs on every plan. Book a call to see it on your own funnel.

Does Curve Compliance sign a BAA?

Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup, typically live in about a week. Book a call to get started.

Sources

Last checked . Vendors change their plans and terms, so confirm the current terms with Formsort before you send it patient data.

See every tool in the BAA Directory.

Track ad conversions under a BAA

Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.

Book a call