Secure HIPAA-secure form

As an Enterprise user with HIPAA support enabled, we need the ability to serve a fillable pdf or other web form to collect secure data without involving another partner, like JotForm (and the additional BAA agreement that requires). It would be great if we could use a workflow to provide the form and autosave the completed document.