For a healthcare provider, health plan, or healthcare clearinghouse to use Wufoo, Wufoo must be HIPAA compliant and sign a business associate agreement (BAA). But Wufoo’s official website doesn’t mention about the HIPAA compliance any where in its security feature. And also SurveyMonkey SurveyMonkey, which owns Wufoo, recommends using SurveyMonkey for collecting protected health information (PHI), which may mean that Wufoo's forms are not HIPAA compliant.