HIPAA-aligned PDF ops without sending PHI to five vendors.

// Patient intake flow (HIPAA context)
const { pdf: intake } = await snap.pdf.fillForm({
  file: INTAKE_TEMPLATE,
  values: {
    patient_name: patient.legalName,
    dob: patient.dob.toISOString().slice(0,10),
    mrn: patient.mrn,
    insurance_plan: patient.insurance.planName,
    allergies: patient.allergies.join(', '),
  },
  flatten: false,
});

const { pdf: signed } = await snap.pdf.sign({
  file: intake,
  mode: 'image',
  imagePng: signaturePng, // captured from tablet
  field: { page: 3, x: 100, y: 120, width: 200, height: 50 },
  timestamp: true,
});

const { pdf: locked } = await snap.pdf.protect({
  file: signed,
  ownerPassword: phi.keyForPatient(patient.mrn),
  encryption: 'aes-256',
});

// Stored in the EHR; audit event fired
await ehr.attachDocument(patient.id, locked, { type: 'intake', signedAt: new Date() });

intake = snap.pdf.fill_form(
    file=INTAKE_TEMPLATE,
    values={
        "patient_name": patient.legal_name,
        "dob": patient.dob.isoformat(),
        "mrn": patient.mrn,
        "insurance_plan": patient.insurance.plan_name,
        "allergies": ", ".join(patient.allergies),
    },
    flatten=False,
)
signed = snap.pdf.sign(
    file=intake.pdf,
    mode="image",
    image_png=signature_png,
    field={"page": 3, "x": 100, "y": 120, "width": 200, "height": 50},
    timestamp=True,
)
locked = snap.pdf.protect(
    file=signed.pdf,
    owner_password=phi.key_for_patient(patient.mrn),
    encryption="aes-256",
)