Identification
Names and roles for sender and recipient, including organization, department, and any authorized representative to establish who is involved and their authority to receive notices.
A clear, signed attestation reduces ambiguity about whether required patient or consumer notices were sent and received. It supports regulatory obligations, preserves audit evidence, and lowers the risk of disputes about timing or method of notification.
Typical users include compliance officers, privacy officers, clinicians, health plan administrators, and authorized third-party agents who must document notice delivery.
The attestation is also used by risk teams and legal counsel to verify that notice procedures were followed and to support audits or investigations.
Names and roles for sender and recipient, including organization, department, and any authorized representative to establish who is involved and their authority to receive notices.
Exact method used (email, certified mail, in-person, patient portal) plus delivery details such as email address, tracking number, or portal message ID to show how notice was sent.
Short description of the notice content (privacy notice, breach notice, treatment advisory) and a reference to the full notice text or attachment for context.
Date and time when the notice was delivered or deemed received; this establishes the start of any compliance or appeal windows tied to the notice.
Declarative language the signer uses to confirm delivery and accuracy, including any conditional statements about attempted deliveries and recipient acknowledgement.
System-captured evidence such as timestamp, IP address, device type, and audit trail entry that supports attribution and non-repudiation of the signing event.
| Field | Configuration |
|---|---|
| Authentication | Email plus optional SMS one-time code |
| Conditional Fields | Show breach details only when breach=yes |
| Retention Settings | Auto-archive after signature to secure storage |
| Notifications | Email receipts to sender and recipient |
Ensure your platform supports secure transmission, persistent audit logging, and controlled access to meet healthcare compliance needs.
Send confirmation to recipient within 7 business days
Retention period begins on effective date of notice
Complete internal review within 30 days of signature
Escalate unresolved delivery disputes within 14 days
Provide copies to authorized requestors per policy timelines
Notice drafted and attached to the attestation record.
First delivery attempt recorded with method and timestamp.
Authorized signer completes and signs the attestation.
Signed file archived and linked to patient record.
A clinical practice used electronic attestations to document patient receipt of privacy and consent notices
A health services partner standardized attestation forms to track partner notifications
Export signed attestations as PDF/A or PDF with embedded audit trail for preservation and court-ready records.
Attach the full notice text, delivery receipts, tracking numbers, and any related correspondence as evidentiary attachments.
Include signer authentication logs, timestamps, IP addresses, and device data in the completion certificate for each attestation.
Maintain role-based access to signed files and logs to limit exposure of PHI and meet least-privilege requirements.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial | Varies by vendor | Varies by vendor | Yes, limited | Yes, limited |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |