Consents live on the chart
The same patient record as scheduling, charting, and billing — a signed form stays with the rest of the chart, with no separate e-signature tool to reconcile.
Consents
Digital consent forms, fully audit-ready.
Ona's digital consent forms let healthcare practices send, sign, and store patient consents in the same system as the chart. Every signature is captured with a timestamp, the signer, and the exact template version, then locked as an immutable record you can export as an audit-ready PDF on demand for any inspection.
- Versioned templates
- Timestamped signatures
- Per-visit + evergreen
- Immutable audit trail
Ona digital consents are version-controlled consent templates with required checkboxes and timestamped digital signatures, built into an all-in-one practice management platform. Each signed form is tied to the patient record it belongs to, so consent stops being a filing-cabinet problem. Signed records cannot be altered, only superseded, and every one exports as a self-contained audit PDF.
It's built for US practices that face audits, payer scrutiny, or per-visit consent rules — behavioral health, primary care, physical therapy, women's health, integrative and functional medicine, naturopathic doctors, and telehealth-native teams. It fits any practice that needs signed consent it can retrieve and prove on demand.
01 · Why it matters
A signature in a filing cabinet is a lawsuit waiting to be filed.
Paper consents don't scale to a real practice. Digital ones, done properly, are replayable years later.
Paper consents are fine, right until somebody asks for a specific one. Then it's twenty minutes of drawer-diving, and if the patient signed before your last template update you're now reading a document nobody remembers approving.
A digital, versioned consent is replayable. You can see exactly what this patient read, on this date, with these acknowledgements ticked — and produce the PDF in seconds when someone asks for it.
02 · Why Ona
Consents that stand up in a deposition.
Signed records are immutable
They cannot be altered, only superseded by a new version — so you can always reconstruct exactly what a patient saw and signed.
Legally binding signatures
Digital signatures hold under ESIGN (Electronic Signatures in Global and National Commerce Act) and UETA (Uniform Electronic Transactions Act), captured with timestamp, signer, IP, user agent, and template version.
Part of the whole platform
An AI-native, all-in-one practice management platform — CRM, EHR, and RCM in one place — with a 14-day free trial and no credit card required.
Required checkboxes, enforced
Critical acknowledgements can't be skipped. Patients can't sign until they've ticked every required box. No more “I didn't see that part.”
Per-visit and evergreen
HIPAA privacy notice once a year, telehealth consent every telehealth visit, release-of-records on demand. Each template carries its own expiry rule.
03 · How a consent moves
Sign, store, retrieve.
Build a version-controlled template
Required checkboxes are enforced, and each template carries a version and a diff against prior versions. The old version is preserved forever.The patient signs, with proof captured
Typed, drawn, or tap-to-sign. Every signature captures a timestamp, the signer, the IP address, the user agent, and the exact template version.Set per-visit or evergreen expiry
A HIPAA privacy notice once a year, a telehealth consent every telehealth visit — each template carries its own rule.Minors and revocations, handled
Guardians sign for minors with the relationship recorded. Patients can revoke a consent, and the original signature is superseded, never deleted.Retrieve and export on demand
Find any consent by patient, template, version, or date range and export a self-contained audit PDF — no drawer-diving.
“I used to dread audit prep. Now it's three filter clicks and a PDF export. The first audit we did with Ona finished two hours early.”
04 · In practice
Where consent shows up.
Telehealth-first therapy
A telehealth consent every visit, painlessly.
The consent auto-attaches to the telehealth service. Patients sign before they can join the video call — no clinician chasing signatures mid-session.
IV therapy clinic
Procedure-specific risk acknowledgements.
A Myers' cocktail consent reads different from a chelation consent. Each procedure carries its own template and required acknowledgements, versioned independently.
Pediatric group
Guardian signatures without the legal mess.
Guardians sign for minors with identity verification. Custody arrangements are recorded on the consent itself.
Multi-state practice
State-specific templates, kept separate.
Build a template per state and map it to the right service. Telehealth across state lines stops being a compliance headache because each state's version lives where you expect it.
FAQ
Common compliance questions.
What are digital consent forms?
Digital consent forms are electronic consent documents patients sign online instead of on paper. In Ona, each form is a version-controlled template with required checkboxes, and every signature records a timestamp, the signer, and the exact template version on the patient record.
Are Ona's consents audit-ready?
Yes. Each signature captures a timestamp, signer, IP address, user agent, and template version, and signed records are immutable — they cannot be altered, only superseded. You can export any consent as a self-contained audit PDF.
Can I pull a signed consent on demand?
Yes. Consents are searchable by patient, template, version, or date range, and you can export any consent as a self-contained audit PDF — no digging through a filing cabinet.
Is a digital signature legally binding for patient consent?
Yes, under ESIGN (Electronic Signatures in Global and National Commerce Act) and UETA (Uniform Electronic Transactions Act) in the US. Ona's signatures include a timestamp, the signer, and the exact template version.
What happens if we need to update a consent template?
You publish a new version. Patients from that date forward see the new one. Old signatures remain tied to the version they signed — you can always reconstruct what any patient saw and signed.
Can patients revoke consent later?
Yes — they can revoke by request through the portal or during a visit. The revocation is timestamped and kept with the record; the original signature is not deleted but superseded.
How do you handle consents for minors?
Guardians sign on behalf of a minor and the relationship is captured on the consent record. When a patient transitions to adulthood, you can reassign consents to them in their own name.
Can I send an updated consent to existing patients?
Yes — assign a template to a cohort of patients and they'll be prompted to sign the next time they open their portal or come in for a visit.
Ready when you are
Make audits boring again.
Bring your current consent PDFs to a 15-minute demo — we'll show you the moment they become searchable.