Identification
Full legal name, date of birth, employee or patient ID, and contact information to ensure accurate attribution and follow-up.
A standardized Business PHA Document reduces inconsistent intake, creates an auditable record of consent and clinical status, and shortens the time between reporting and action while preserving legal defensibility under ESIGN and state e-signature law.
The Business PHA Document is commonly used by HR, occupational health, and supervisors who manage workplace health and safety.
Distribution varies by company size, but secure handling and role-based access are consistent best practices.
A healthcare professional (nurse or physician) who reviews assessment responses, documents clinical findings and clearance status, and signs medical sections. Their entries are treated as PHI and require appropriate access controls and retention.
HR staff receive completed assessments, apply employment policies, and manage retention. HR often controls routing, obtains consent for electronic transmission, and ensures privacy protections are in place.
Full legal name, date of birth, employee or patient ID, and contact information to ensure accurate attribution and follow-up.
Simple yes/no symptom list with onset dates and exposure history to support clinical triage and workplace decisions.
Fields for vaccine dates, manufacturer, and latest test results; allow file upload for supporting documentation.
Clinician section for fitness-for-duty, restrictions, or return-to-work date, with a clear effective date.
Explicit consent language covering electronic records, disclosure to relevant parties, and withdrawal instructions.
Signed and dated block with an audit trail including signer identity, timestamp, IP or authentication method, and version history.
| Field | Configuration |
|---|---|
| Authentication Method | Email link, SMS code, or two-factor authentication |
| Notifications | Automatic email reminders and completion alerts |
| Storage Location | Encrypted cloud folder (Box, Google Drive, or on-prem archive) |
| Retention Setting | Auto-archive or delete per retention policy |
Ensure the platform supports required authentication, secure storage, and the integrations your organization uses.
At hire or before return to work as employer policy requires
Timely review, typically within 48–72 hours after submission
Keep I-9 three years after hire or one year after termination, whichever is later (8 CFR §274a.2)
Retain PHI for 6 years (45 CFR §164.530(j))
Report workplace incidents per OSHA and state timelines when applicable
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies | Varies | Varies | Varies |
| Bulk Send | Yes | Yes | Yes | Yes | Varies |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |
The clinic moved intake forms online to reduce processing time and protect PHI.
A property management firm used electronic forms to document staff health and access decisions.