HIPAA form builder for WordPress

Patient forms on your site. Patient data off it.

Szilva lets you build forms in WordPress whose submissions are stored on the Szilva server, not in the WordPress database.

Coming soon to the WordPress.org plugin directory.

How it works

Three steps, and WordPress never holds a patient’s answers

  1. 1

    Build your forms

    Build them in WordPress, in a form builder made for clinical forms. Questions and whole panels can come straight from LOINC.

  2. 2

    Put them on your site

    Add a form to any page with the Szilva Form block, or with its shortcode where the block editor isn’t used.

  3. 3

    Patients fill them in

    Their answers go from their browser straight to the Szilva server, never through WordPress. Your staff work with them in the plugin’s admin.

Features

Clinical forms, on the standards health records use

Patient data stays out of WordPress

Answers, patient accounts and records are stored only on the Szilva server. WordPress keeps just the IDs that link your site to its project.

Built on FHIR

Forms are FHIR Questionnaires that follow HL7’s Structured Data Capture guide, and their answers are QuestionnaireResponses, so they work with any FHIR system.

LOINC built in

Search LOINC from the form builder, and add its questions and whole panels to a form, or start a form from one.

Accounts only to send

Anyone can fill in a form. Patients create their account when they send it, from the name and email they already gave, and can save to finish later.

Styled once, everywhere

Set labels, help texts, inputs, buttons and the accent color in the Style tab. The style is saved with the form, so it looks the same on every page.

Into the patient’s record

A form’s extraction rules can add its answers to the patient’s health record, where your staff find them.

HIPAA

Does Szilva make my site HIPAA compliant?

No plugin can do that on its own: compliance also depends on a Business Associate Agreement (BAA) with whoever hosts your patients’ data, and on your practice’s own policies and safeguards.

What Szilva does is keep protected health information out of WordPress, on a server built for it, where only the patient and your staff can see it. And we sign a BAA with you before you store any.

FAQ

Questions

Where are form submissions stored?

On the Szilva server, never in your WordPress database. A patient’s browser sends their answers straight to the server, so they don’t pass through your WordPress site either.

Do patients need an account?

To send a form, yes; not to see it or fill it in. Their account starts with the name and email they gave in the form, so all that’s left is a password. Until then, their answers stay in their browser.

Does it work with my theme?

Yes, with any theme. Each form is rendered apart from your theme’s styles, in its own shadow DOM, so neither affects the other, and the form sits on your page’s own background.

Which countries does it support?

The United States, for now: forms and records follow US Core, HL7’s FHIR profiles for the US. Other countries are coming.

Talk to us

Questions about Szilva, or a BAA for your practice? Write to us.