Developer Experience

APIs developers actually love

REST, typed SDKs, webhooks, sandbox mode. Integrate HIPAA in an afternoon — not a sprint.

Live in under 5 minutes

No compliance consultant, no months of legal review. Install, embed, collect PHI.

Add <script> tag + data-haas-form div

Patient submits in embed.hipaacompliant.io iframe

Receive record_id via postMessage — never PHI

npm install @haas/sdk for vault + webhook access

npm install @haas/sdk

# or yarn
yarn add @haas/sdk

# or pnpm
pnpm add @haas/sdk

● Live.bashTypeScript native

React

@haas/react

Official

Node.js

@haas/sdk

Official

Python

haas-sdk

Official

github.com/haas-dev/go

Official

Ruby

haas-ruby

Official

PHP

haas/haas-php

Community

Full production parity sandbox. Fake PHI, real flow. No risk to real patient data.

Async events for form completions, PHI access, audits. HMAC-signed. Retry with backoff.

Every API call logs who accessed what and why. Immutable. No config needed.

Global edge network. PHI retrieval p99 under 80ms. No cold starts on your critical path.

API keys for server, OAuth PKCE for browser. Scoped access, key rotation, IP allowlists.

Every read, write, and delete logged. HMAC-SHA256 signed. Retained indefinitely (HIPAA requires 6 years minimum). Exportable to SIEM.

Free sandbox. No credit card. No HIPAA lawyer needed.