Security and LGPD for health data
Under the LGPD, health data is sensitive personal data. Careforms was built to handle it with the care the law and professional confidentiality require.
Who sees what
Each health professional sees only the patients they follow and only the answers to questionnaires sent in their name. The front desk sees the registry, never the answers. The Careforms team runs the platform but does not read clinical data.
Consent and audit trail
Before answering, the patient authorizes the processing of their health data (LGPD, art. 11). Every access to patient data is recorded (who, what and when), and the clinic can export that record (depending on the plan).
Technical protection and retention
Access is over HTTPS, with passwords protected by Argon2id and lockout after failed attempts. The patient link requires a 4-digit code, also with lockout. Data is kept on AWS servers. Health data is not deleted before the 20-year retention required for clinical records.
How it works
- 1
You send
Choose the questionnaire and the patient.
- 2
The patient answers
Through the link in the email or WhatsApp, with a 4-digit code.
- 3
You follow up
Answers and progress charts in your dashboard.
Frequently asked questions
Does the Careforms team see my patients' answers?
No. The Careforms team manages accounts and plans, but the platform does not show them clinical data.
What happens to the data if I cancel?
Health data is not deleted when you cancel: it follows the retention required for clinical records.
How does the patient access the questionnaire securely?
Through the unique link they receive, plus a randomly generated 4-digit code. After 5 wrong attempts, access is locked for 15 minutes, and the link expires in 14 days.
Your patients improve between visits. Now you can see it.
Try Careforms and follow your patients’ progress from the very first week.