HIPAA-Compliant Backend Service Development
Budget: $50 – $0 USD
I need a developer to build a secure, HIPAA-compliant backend service that receives Jotform form submissions via webhook, generates the submission PDF, and sends it to my pharmacy’s fax number using a HIPAA-compliant fax provider’s API (e.g., SRFax, Fax.Plus, eFax Corporate).
What the System Must Do
Receive Jotform submissions via webhook.
Use Jotform API to:
Pull submission metadata
Download/generate the submission PDF
Send the PDF to a fax provider’s API, such as:
SRFax API
Fax.Plus API
eFax Corporate API
Handle success, failure, and retry logic.
Log only non-PHI metadata (e.g., timestamps, submission ID, fax job ID).
Return a clean success/error response.
Be built in a HIPAA-defensible way (no PHI in logs or console output).
Technical Requirements
Hosted as a lightweight backend using one of the following:
AWS Lambda + API Gateway
Azure Function
Google Cloud Function
Secure storage & encryption:
No PHI in logs
Temporary PDF storage (if needed) must be encrypted
Auto-delete PDFs immediately after fax send
HTTPS required end-to-end
Authentication:
Securely store API keys (e.g., AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager)
Language preference (open to any):
Python
Node.js
Go
(Choose the one the freelancer prefers — I only care about performance + security)
Inputs and Outputs
Incoming Payload (from Jotform)
Submission ID
Form ID
Metadata
No PDF attached (developer must retrieve via API)
Outgoing Payload (to fax provider)
PDF file (submission)
Destination fax number
API credentials
Logged Data (must NOT include PHI)
Jotform submission ID
Fax job ID
Timestamp
Success / failure status
Deliverables
Fully functioning secure API endpoint
Working PDF → Fax pipeline
Error handling with retries
Minimal logging (non-PHI only)
Environment configuration instructions
One short Loom video explaining:
System architecture
Where to plug in API keys
How to test the workflow
Basic documentation covering:
Setup steps
Dependencies
How to modify the destination fax number
How to update credentials
How logs work
Ideal Freelancer Qualifications
Experience with serverless architecture (AWS/Azure/GCP)
Strong background in API integrations
Familiarity with Jotform API
Experience with fax APIs like SRFax or Fax.Plus
Understanding of HIPAA-compliant data flows (big plus)
Able to work with minimal PHI exposure
High communication and documentation skills
Budget
I’m open to quotes depending on experience and speed.
Typical ranges I’ve seen for this type of work:
$250–$800 for the full workflow
Larger budget available if enhanced logging & long-term maintenance are needed
(Feel free to bid based on your confidence and timeline.)
Additional Info
This is for a pharmacy use case.
The workflow must be defensible under HIPAA, but you will not be handling PHI beyond testing.
I can provide:
Jotform API key
Test form
Fax provider API credentials (sandbox or real)
What the System Must Do
Receive Jotform submissions via webhook.
Use Jotform API to:
Pull submission metadata
Download/generate the submission PDF
Send the PDF to a fax provider’s API, such as:
SRFax API
Fax.Plus API
eFax Corporate API
Handle success, failure, and retry logic.
Log only non-PHI metadata (e.g., timestamps, submission ID, fax job ID).
Return a clean success/error response.
Be built in a HIPAA-defensible way (no PHI in logs or console output).
Technical Requirements
Hosted as a lightweight backend using one of the following:
AWS Lambda + API Gateway
Azure Function
Google Cloud Function
Secure storage & encryption:
No PHI in logs
Temporary PDF storage (if needed) must be encrypted
Auto-delete PDFs immediately after fax send
HTTPS required end-to-end
Authentication:
Securely store API keys (e.g., AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager)
Language preference (open to any):
Python
Node.js
Go
(Choose the one the freelancer prefers — I only care about performance + security)
Inputs and Outputs
Incoming Payload (from Jotform)
Submission ID
Form ID
Metadata
No PDF attached (developer must retrieve via API)
Outgoing Payload (to fax provider)
PDF file (submission)
Destination fax number
API credentials
Logged Data (must NOT include PHI)
Jotform submission ID
Fax job ID
Timestamp
Success / failure status
Deliverables
Fully functioning secure API endpoint
Working PDF → Fax pipeline
Error handling with retries
Minimal logging (non-PHI only)
Environment configuration instructions
One short Loom video explaining:
System architecture
Where to plug in API keys
How to test the workflow
Basic documentation covering:
Setup steps
Dependencies
How to modify the destination fax number
How to update credentials
How logs work
Ideal Freelancer Qualifications
Experience with serverless architecture (AWS/Azure/GCP)
Strong background in API integrations
Familiarity with Jotform API
Experience with fax APIs like SRFax or Fax.Plus
Understanding of HIPAA-compliant data flows (big plus)
Able to work with minimal PHI exposure
High communication and documentation skills
Budget
I’m open to quotes depending on experience and speed.
Typical ranges I’ve seen for this type of work:
$250–$800 for the full workflow
Larger budget available if enhanced logging & long-term maintenance are needed
(Feel free to bid based on your confidence and timeline.)
Additional Info
This is for a pharmacy use case.
The workflow must be defensible under HIPAA, but you will not be handling PHI beyond testing.
I can provide:
Jotform API key
Test form
Fax provider API credentials (sandbox or real)
Related categories:
PHP
Python
Software Architecture
Azure
Amazon Web Services
Node.js
JSON
API Development