Upload custom forms

Is it possible to upload custom forms with this and be HIPAA compliant? For example, I would like to have an end user upload a doctor referral form (normally a PDF) and it be received by the site admin while being HIPAA compliant.