HIPAA Forms Developer API

Programmatic form creation, submission handling, and retrieval. All endpoints support HIPAA-compliant PHI handling. Use API keys or secure tokens for authentication.

Authentication

Include your API key in the Authorization header as a Bearer token. Never expose API keys in client-side code. For server-to-server integrations, rotate keys periodically and use environment variables.

Authorization: Bearer sk_live_xxxxxxxxxxxxxxxx

Create Form

POST /api/forms — Create a new form with fields and validation rules.

// Request
POST /api/forms
Content-Type: application/json

{
  "title": "Patient Intake",
  "fields": [
    { "type": "text", "name": "patient_name", "label": "Full Name", "required": true },
    { "type": "email", "name": "email", "label": "Email" }
  ]
}

// Response 201
{
  "id": "form_abc123",
  "title": "Patient Intake",
  "embed_url": "https://forms.example.com/embed/abc123"
}

Submit Form

POST /api/submissions — Submit form data. PHI is encrypted in transit and at rest.

// Request
POST /api/submissions
Content-Type: application/json

{
  "form_id": "form_abc123",
  "data": {
    "patient_name": "Jane Doe",
    "email": "jane@example.com"
  }
}

// Response 201
{
  "id": "sub_xyz789",
  "form_id": "form_abc123",
  "status": "received",
  "created_at": "2025-03-11T12:00:00Z"
}

Retrieve Submissions

GET /api/submissions — List submissions for a form. Supports pagination and filtering. Requires appropriate access permissions.

// Request
GET /api/submissions?form_id=form_abc123&page=1&per_page=20

// Response 200
{
  "submissions": [
    {
      "id": "sub_xyz789",
      "form_id": "form_abc123",
      "data": { "patient_name": "Jane Doe", "email": "jane@example.com" },
      "created_at": "2025-03-11T12:00:00Z"
    }
  ],
  "total": 42,
  "page": 1
}

Webhooks

Configure webhook URLs to receive real-time notifications when forms are submitted. We send a POST request to your endpoint with the event payload. Verify signatures to ensure requests originate from CloudAxe.

// Webhook event payload
{
  "event": "submission.received",
  "timestamp": "2025-03-11T12:00:00Z",
  "data": {
    "submission_id": "sub_xyz789",
    "form_id": "form_abc123"
  }
}

Build Secure Healthcare Workflows With Our API

Get API keys and full documentation when you sign up for a Professional or Enterprise plan.

Get started