DocSupra › Integrity Scanner › HIPAA authorization form checker
DocSupra · Integrity Scanner
Is this authorization complete?
The required elements of 45 CFR 164.508(c), each marked present with the line that shows it, or missing.
Check a HIPAA authorization form for its required elements.
The short answer. Drop the form as a PDF into the Integrity Scanner, open the Compliance tab and choose the form type: HIPAA authorization. The scanner reads the text and marks each required element of 45 CFR 164.508(c) as present, with the line that shows it, or missing. It also lists the personal identifiers in the text, masked, and can make a redacted copy.
An authorization that lacks a required element is not a valid authorization, and the gap is usually found after the records have been released. The check takes seconds and runs on the device that already holds the form, so a patient’s form is never sent anywhere to be checked. You choose the form type; the scanner does not guess it.
The elements it looks for in a HIPAA authorization
A specific description of the information to be used or disclosed.
The person or class of persons authorized to make the disclosure, and the person or class to whom it may be made.
The purpose of the disclosure, or the statement “at the request of the individual”.
An expiration date or an expiration event.
The signature of the individual or a representative, and the date.
The right to revoke and how; whether treatment, payment or enrollment is conditioned on signing; and the potential for redisclosure by the recipient. Whether the individual receives a copy is checked as a recommendation.
Other forms it checks
- Notice of Privacy Practices acknowledgement (45 CFR 164.520(c)(2)(ii)): the reference to the notice, the acknowledgement of receipt, the signature and date, and the good-faith record when the acknowledgement is not obtained.
- GLBA privacy notice (Regulation P model form, 12 CFR 1016): what is collected, the reasons it can be shared, how to limit sharing, affiliates and nonaffiliates, how the information is protected, and a contact.
- Consent to electronic records and signatures (ESIGN Act, 15 U.S.C. 7001(c), and UETA): consent to electronic records and to signing electronically, the right to withdraw and to a paper copy, the hardware and software requirements, how to update contact information, and the scope.
Try it on a sample: a HIPAA authorization with three required elements missing. Open the sample in the Integrity Scanner.
How to check a form
Open the Integrity Scanner
Go to docsupra.com/?abre=scanner.
Drop the form as a PDF with text
The check reads the text layer of the PDF. Export the form from the program that made it; a photo or a scanned image has no text to read, and the scanner says so.
Choose the form type
In the Compliance tab, pick HIPAA authorization, NPP acknowledgement, GLBA privacy notice or consent to electronic records.
Read the elements
Each required element is marked present, with the page and the line that shows it, or missing. The same tab lists the personal identifiers in the text, masked.
What it is not
It is a checklist, not a legal review. It looks for the wording each element normally uses: a form can contain every element and still be invalid for another reason, and unusual wording can be missed, so read the line it found. It does not make an organisation compliant with HIPAA, it does not certify a form, and it is not legal advice.
What the Integrity Scanner costs
From one lease to a whole department: pay once for a few checks, or subscribe.
Document downloads are not part of this subscription: repairing and exporting documents is the Compliance Studio. Prices are in USD and exclude any tax that applies in your country; Stripe calculates it and shows it before you pay.
Check a form now →Questions
What are the required elements of a HIPAA authorization?
Under 45 CFR 164.508(c): a specific description of the information; who may make the disclosure; to whom it may be made; the purpose; an expiration date or event; the signature of the individual or representative and the date; and statements about the right to revoke and how, whether treatment, payment or enrollment is conditioned on signing, and the potential for redisclosure by the recipient.
Does it work on a scanned form?
Not yet. The compliance check reads the text of a PDF. A photo or a scanned image has no text layer; export the form as a PDF with text from the program that made it and check that copy.
Is the form uploaded?
No. The file is read on your own device, inside the browser. There is no upload endpoint, no server copy and no retention period; you can disconnect from the internet and it keeps working.
Can it remove the personal data from the form?
It can produce a redacted copy: an image-only PDF with the identifier lines blacked out and no text layer. The copy downloads with a check or the subscription.
What does it cost?
Where the file came from and whether it is safe to open are shown to everyone. Whether it was edited, how, and what it exposes comes with a check: 3 checks with the $9.99 pack, 50 with the $19.99 pass, or up to 1,000 files a month with the $14.99 subscription. It is included with Professional Team and Corporate Studio.
More on DocSupra
Made and copyrighted © 2026 by Soelys Muñoz. DocSupra™ is her trademark. All rights reserved. How to recognise the real site.