Best approach for building secure patient intake forms with AEM Forms?

Hi everyone,

I’m researching the best way to build secure digital forms for a healthcare software workflow, mainly around patient intake, consent forms, appointment requests, and insurance information collection.

The goal is to move away from manual PDFs and create a smoother digital experience where patients can submit information online, staff can review it easily, and the data can later connect with internal healthcare systems or an EHR/CRM.

For teams using Adobe Experience Manager Forms in healthcare or similar regulated industries, what would be the recommended setup?

I’m especially trying to understand:

1. Should patient intake forms be built directly in AEM Forms, or should AEM only handle the front-end form experience while sensitive data is passed to a separate backend system?
2. What is the best way to handle consent forms, signatures, and reusable patient information across multiple forms?
3. How do teams usually manage form data security, access control, and audit trails in this kind of workflow?
4. Are there any best practices for connecting AEM Forms with healthcare software systems, APIs, or EHR platforms?
5. For a healthcare use case, would AEM Forms and Acrobat Sign be a better combination than using custom forms alone?

I’m not looking for legal advice, just practical implementation guidance from teams that have worked on healthcare, insurance, or regulated form workflows.

Thanks in advance.