FAQ If you are shopping for a HIPAA-compliant form builder, the marketing is going to tell you everyone qualifies. Encryption, BAA included, audit logs: it reads like a feature checklist every vendor has already passed. The honest version is messier.