Formstack

SMTP Integration for HIPAA accounts

With HIPAA accounts using your SMTP server, you can send ePHI data through Notification Emails to users on your Formstack account. This way you can easily and securely pass patient data between users. Under current HIPAA accounts, sending Notification Emails are limited to only sending a link to the submission data. When integrating your account with your SMTP server, you will now be able to send "All Submitted Data" and Custom Messages that include field variables populated with data.

If you are interested in 
a HIPAA account and the HIPAA SMTP integration, please email support@formstack.com.

Important Note: Due to HIPAA compliance, enabling the SMTP settings will
allowePHI data to be sent within Notification emails, however, Confirmation emails will be restricted to Custom messages only and prevent the use of Form Fields in Confirmation messages.  These security measures are in place to safeguard and protect Patient and ePHI data during Confirmation email transmission. 

For Notification emails, only Formstack Account User email addresses can be used when setting up or sending email Notifications.  Enabling this setting will remove all 
non-Formstack user email addresses from any current Notification emails.


For details on setting up the SMTP integration, click here
When the SMTP Integration is turned on, the "To" section in a Notification Email will list all the usernames on the Formstack account. You can select ones individually or Select All. For accounts with a lot of usernames, there is a search bar to easily find them. If you need to add another email to the list, you will have to create a new User.
The SMTP integration will allow you to use "All Submitted Data" or Custom Messages. Form fields can be added to the message and the subject line.
When the SMTP Integration is turned off, you will be limited to "Link to Submitted Data" or custom message with no form fields.

To learn more about HIPAA accounts, click here. Also, email support@formstack.com to see how you can make your account and Notification Emails HIPAA Compliant.