Therapy & Mental Health Forms
Intake questionnaires, psychological screenings, session-preparation forms — built for psychotherapists, psychologists, counsellors, and mental-health clinics that cannot afford to hand sensitive emotional and clinical data to a form vendor who can read it. Zero-knowledge encryption, Swiss hosting, aligned with Art. 321 StGB professional secrecy and nFADP.
Mental-health practice operates on one of the strictest confidentiality standards in professional life. A patient who discloses depression, trauma history, suicidal ideation, substance use, relationship difficulties, or psychiatric diagnoses is trusting the practice with information that — if exposed — can affect their employment, their family life, their insurance, and their safety. Yet many practitioners still collect that information through general-purpose online forms whose provider can read every word before the clinician ever sees it.
Schweizerform is built on the opposite premise. Every submission — an intake questionnaire, a PHQ-9 screening, a trauma history, a medication list, a session-preparation note — is encrypted in the patient's browser before it reaches our servers. We physically cannot read it. For psychotherapists, psychologists, counsellors, and mental-health clinics, that property — combined with Swiss hosting and nFADP-aligned architecture — turns online intake from a confidentiality risk into a control that actually meets the profession's expectations.
Who this page is for
Independent psychotherapists, clinical and counselling psychologists, psychiatrists running office practice, couples and family therapists, addiction counsellors, specialised trauma and eating-disorder services, and mental-health clinics — in Switzerland, in the EU, or serving cross-border clients.
Why Generic Form Tools Fail Mental-Health Practice
Most online form tools operate on a conventional SaaS model: the patient's browser sends plain-text data over HTTPS, and the provider's server stores it. That server can read everything. So can the provider's staff, their integration partners, anyone who compromises their infrastructure, and any authority that serves a lawful order on the provider.
For most forms, that model is acceptable. For a psychotherapist collecting an intake history, it creates a problem that the profession has specifically organised itself to avoid: the patient's mental-health disclosure is sitting in plain text on a third-party server.
- A new patient describes a history of sexual abuse in an intake questionnaire; the provider's database contains a readable account before the first session
- A PHQ-9 or GAD-7 score marked in the severe range sits on a server indexed by the provider's analytics
- A substance-use history names specific drugs, frequencies, and contexts; that text is processed by the provider's backend and backed up offsite
- A session-preparation form describes suicidal thoughts the patient felt unable to say out loud; the response is stored alongside marketing-survey data on the same provider's infrastructure
- A subpoena or data request targets the provider; it reaches the patient's mental-health file without the patient ever being notified
Mental-health data is categorically sensitive under Swiss and EU law
The Swiss nFADP treats data about mental health as sensitive personal data requiring heightened protection, and Art. 321 of the Swiss Penal Code makes breach of professional secrecy by regulated psychologists and psychotherapists a criminal offence. The EU GDPR classifies mental-health data under Art. 9 special categories. Across all three, a provider with read access to intake content is a processor whose breach radius is legally significant.
How Schweizerform Protects Clinical Confidentiality
Schweizerform is a zero-knowledge end-to-end encrypted form platform. The encryption happens in the patient's browser, before any data leaves their device. Only holders of the form's Access Code can decrypt submissions. We — the provider — cannot.
You generate a form and an Access Code
When you create an intake or screening form, Schweizerform generates a key pair and an Access Code. The public key lives in the form; the Access Code is held only by the practitioner or the practice. Our servers never see it.
The patient submits from any device, at home, in their own time
When the patient completes the form, their browser encrypts every field — narrative answers, screening scores, uploaded documents — with strong symmetric encryption, then wraps the symmetric key to the form's public key. Our servers receive encrypted blobs they cannot decrypt.
You decrypt in-browser before the session
When the practitioner opens the submission, their browser fetches the encrypted blob, unwraps the symmetric key using the Access Code, and decrypts locally. The plain text never touches our servers.
Professional secrecy is protected by architecture, not policy
Because we never see plain-text submissions, we cannot be compelled to hand them over, expose them in a breach, or process them for analytics. Confidentiality is enforced by cryptography, not by trust in the vendor — which is the only position consistent with Art. 321 secrecy.
Concrete Clinical Use Cases
First-session intake questionnaire
The core use case. Instead of asking the patient to fill a paper form in the waiting room or to recap their whole history verbally in the first session, a secure intake form collects presenting concern, history, current medication, relevant medical background, prior therapy, and risk factors — before they arrive. Every field is encrypted in the patient's browser. The practitioner opens the submission and enters the first session already informed.
Validated screening instruments (PHQ-9, GAD-7, PCL-5, AUDIT, etc.)
Standardised screening and outcome measures are used before intake, between sessions, and as outcome tracking. Their scores are highly diagnostic and must stay strictly inside the clinical relationship. Schweizerform lets you run these instruments through a secure link — score the form when you decrypt it, and keep the raw responses under the practice's control, not the vendor's.
Session-preparation and homework forms
Many therapeutic modalities — CBT, ACT, schema therapy, exposure work — rely on between-session tasks. Thought records, exposure diaries, and behavioural logs are deeply personal and often record specific situations, people, or memories. A zero-knowledge form replaces insecure email attachments with a channel that only the therapist can read.
Risk-assessment and crisis intake
Specialised crisis lines, suicide-prevention services, and trauma clinics need intake that the reporter can complete without fear that the answers will surface outside the service. Encrypted submission with per-form Access Codes means that even inside a larger clinical organisation, only the designated crisis team holds the keys to that form.
Couples, family, and adolescent intake
Couples and family therapy intake often requires separate confidential questionnaires for each participant. Schweizerform lets each person submit a private, encrypted response, which the therapist can then reconcile with the relational context in their own notes — without the intake data being visible across participants or to the provider.
Insurance-compatible outcome tracking
Some health-insurance models require periodic outcome reporting. Schweizerform allows routine outcome measures (e.g., CORE-OM, OQ-45) to be completed securely by the patient. Once decrypted in the practice's browser, the practitioner enters an appropriate summary score into the insurer's channel — without the raw responses ever leaving the practice.
What Patients, Regulators, and Subpoenas See
| View | Generic provider | Schweizerform |
|---|---|---|
| Patient filling the form | Plain-text form, stored on vendor cloud | Plain-text form, encrypted in-browser before submission |
| Provider staff / support agent | Can read intake content, screening scores, and uploads | Cannot decrypt; sees encrypted blobs only |
| Subpoena served on the provider | Plain-text clinical content can be produced | Encrypted ciphertext only; useless without the Access Code |
| Provider breach | Readable mental-health records exposed | Ciphertext exposed; clinical content remains unreadable |
Regulatory Context: nFADP, Art. 321 StGB, GDPR
Swiss psychologists and psychotherapists hold a bar-enforced duty of professional secrecy under Art. 321 of the Swiss Penal Code, reinforced by the Psychology Professions Act (PsyG) and cantonal health-practice regulation. Breach of that secrecy — including via an inadequately secured third-party processor — is a criminal offence. The nFADP adds a civil data-protection layer, treating mental-health data as sensitive personal data requiring a high standard of security (Art. 8), documented processor obligations (Art. 9), and a short breach-notification deadline (Art. 24).
In the EU, mental-health data is a special category under Art. 9 GDPR. Processors must meet the heightened security bar of Art. 32 and, under Art. 34(3)(a), a breach that only exposes data rendered unintelligible to unauthorised parties — for example, by strong encryption where the keys were not compromised — does not require individual notification.
Encryption is one part of compliance, not the whole
Schweizerform gives you a technical confidentiality layer for intake and outcome data. Your practice still needs informed-consent procedures, a retention policy, a clear professional-secrecy waiver framework, and documented risk-assessment processes. The encrypted form makes the intake side defensible; your clinical governance does the rest.
Features Relevant to Mental-Health Practice
- Zero-knowledge end-to-end encryption on every submission — no provider read access
- Encrypted document uploads — prior reports, medication lists, referring-doctor letters
- Multi-language forms (EN / DE / FR / IT) out of the box — patients can fill intake in their mother tongue
- Per-form Access Codes that can be scoped to specific practitioners in a group practice
- Swiss hosting with nFADP-aligned data-processing posture — response data does not leave Switzerland
- Audit log of access events without exposing submission content
- Support for validated screening instruments in a secure, repeatable format
- Free tier suitable for piloting a single intake form before expanding to the whole practice
Common Objections
"Patients will never fill a form online for something this personal."
Evidence and clinical experience both suggest the opposite: patients often disclose more on a thoughtful structured form than in an initial verbal interview, because the form lets them take their time, revisit difficult questions, and share what they might hesitate to say face-to-face. A visibly encrypted, Swiss-hosted channel increases that willingness.
"If we lose the Access Code, we lose the intake."
Correct — this is a deliberate property of zero-knowledge architecture. The recommended practice is a documented key-custody procedure: a sealed envelope held by the practice, a split custody between two clinicians in a group, or a hardware security module. It avoids single-person failure and preserves professional secrecy.
"We need to integrate with our practice-management software."
Integrations happen after decryption, on the practitioner's workstation. The encrypted submission is decrypted in-browser and exported in whatever structured form your practice software accepts. An integration on our server side is by definition impossible — we do not have the keys.
"Email is easier."
Email is habit, but professional-secrecy liability is asymmetric: the practitioner carries the consequence of a disclosure that should not have happened. A single encrypted intake form, linked from the practice website, removes unencrypted attachments from the picture and gives a cleaner audit trail.
Rolling Out a Schweizerform Intake Channel
Start with a single form
Choose the most frequent one — typically the initial intake questionnaire — and migrate that first. Keep the paper form as a fallback for the first few weeks.
Agree key custody
For a solo practice, a sealed Access Code envelope plus a recovery copy held at a different address is usually enough. For a group practice, split custody between the clinical lead and the practice manager.
Publish the form in the relevant languages
For a Swiss practice, that often means DE / FR / IT / EN. The same form renders in each language and remains end-to-end encrypted across all of them.
Add it to the patient pathway
Send the form link as part of the appointment-confirmation email. Give a gentle note about confidentiality — 'this form is encrypted in your browser; only we can read it' — without turning it into a marketing pitch.
Review retention and screenings after three months
Check how many patients are completing the form, whether screening thresholds are being set correctly, and whether the practice is consistently deleting decrypted intake data after it has been integrated into the clinical record.
The Bottom Line
Mental-health practice runs on trust. A patient who discloses depression, trauma, or suicidal ideation on a form is extending the therapeutic alliance to whatever collects that form. A tool whose provider can read every word of that disclosure is not compatible with the ethics or the legal standing of the profession.
Schweizerform offers a direct answer: zero-knowledge end-to-end encryption on every form, Swiss hosting, and a posture aligned with Art. 321 professional secrecy and nFADP expectations. No paid upgrade for security. No US-cloud dependency for clinical response data. No third-party-readable copy of sensitive mental-health disclosures on a server you do not control.
Start with a single intake form on the free tier. Swiss hosting, zero-knowledge encryption, and full EN / DE / FR / IT support — no credit card required.
Disclaimer: This page is general information and marketing content, not legal, regulatory, clinical, or professional-ethics advice. References to Art. 321 of the Swiss Penal Code, the Psychology Professions Act (PsyG), the nFADP, the EU GDPR, validated screening instruments, and related frameworks are summarised at a conceptual level and are subject to jurisdictional interpretation, professional-body guidance, and future legislative change. Responsibility for clinical practice, informed consent, and professional secrecy remains with the treating practitioner or clinic. Consult qualified Swiss or EU healthcare-regulatory counsel and a data-protection specialist before making compliance or purchasing decisions.