New Dawn requires HIPAA-compliant handling of client contact data. The question arose during site build: how to handle the contact form on the website given that standard form tools (Gravity Forms, Google Forms) are not HIPAA-compliant out of the box.
The agreed solution is to embed a form directly from Jane App — New Dawn's existing HIPAA-compliant CRM — so that data is stored in a compliant environment from the moment of initial entry.
New Dawn's HIPAA obligation is nuanced:
Rather than building a workflow to delete or migrate pre-client form data after sign-on, the simpler approach is to route all contact data into a HIPAA-compliant store from the start.
Jane App is a therapist-focused CRM that New Dawn already uses. It is built with HIPAA compliance by design, including secure data storage.
Approach:
- Embed a Jane App form (or sign-up flow) directly on the New Dawn contact page
- Data flows from the embedded form into Jane App's HIPAA-compliant database immediately
- No intermediate storage in a non-compliant system
This sidesteps the complexity of making Gravity Forms or Google Forms compliant (BAAs, encrypted storage configuration, etc.).
| Option | HIPAA Compliant? | Notes |
|---|---|---|
| Google Forms | No | Not compliant out of the box |
| Gravity Forms | Not by default | Can be configured, but complex |
| Jane App embed | Yes | Compliant by design; data stays in Jane App |