Secure forms and automated workflows in healthcare: lessons from the pandemic

By the Redsis Automation & Integration team · October 2026 · 6 min read

When reporting becomes a mission-critical operation

In Colombia, Resolution 676, issued by the Ministry of Health on April 24, 2020, created the information system for reporting and monitoring people affected by COVID-19. Health departments, insurers (EPS), public and private providers (IPS), the laboratory network and other entities were required to report cases, contacts, people in preventive isolation, test results and hospital capacity on a regular basis, and that data fed the national health information system.

For a group with multiple companies, sites and teams, that created a very concrete operational problem:

• Many sources. Each company in the group produced its own reports, in different formats.
• Sensitive data. Patient information requires encryption, access control and traceability.
• Daily volume. Manually consolidating hundreds or thousands of records a day is slow and error-prone.
• Zero lead time. There was no room for a traditional development project.

A shared spreadsheet or an email with attachments wasn't going to cut it. The answer had to be secure, automated and integrated with the group's systems.

Three building blocks, one solution in five days

The key to hitting the deadline was not building from scratch what proven platforms already do. We combined three components:

• Profound for the user interface. Profound Logic's suite lets teams build modern web front ends on top of enterprise applications with low-code tools, without rewriting existing business logic.
• GoAnywhere Secure Forms for data capture. The module lets you design forms with fields, labels and file uploads, publish them over HTTPS and encrypt uploaded files with AES-256, with authenticated or URL-based access as needed.
• GoAnywhere Advanced Workflows for validation. Every form submission triggers a workflow that validates, transforms and routes the data to target systems, with tasks such as encryption, data transformation and database interaction.

On top of that foundation we added what the group needed to operate: a form branded for each company, access for every company and integration with the group's back end for fast data synchronization.

Five lessons for building critical solutions in days

1. Start with the data, not the screen

Before designing the form, agree on what information is needed, in what format and where it goes. Once the destination and validation rules are clear, the interface comes together quickly and later changes are minor.

2. Validate at the point of entry

Fixing data at the source costs far less than fixing it after consolidation. That's why automatic validation should happen in the same workflow that receives the form, before information reaches internal systems.

3. Design for multiple companies from day one

In a business group, each company has its own identity and users. Branded forms per company and access controlled by company avoid duplicate development and make adoption easier.

4. Security is non-negotiable, even in a hurry

Health data is among the most sensitive information any organization handles. Using a platform that already provides encryption in transit and at rest, access control and audit logs lets you move fast without opening gaps.

5. Automate the last mile

Many digital solutions capture information well but leave it sitting in a folder until someone processes it. The real value shows up when the workflow delivers validated data to the systems where decisions get made.

The result: from form to decision with no manual steps

The solution was designed and built in five days and now processes more than 1,000 reported COVID-19 cases a day. Data processing is 100% automated, which lets the group's teams define action plans faster. Every company in the group has access, each with its own branding, and information syncs quickly with the back end.

For an organization that serves millions of members, that meant more than meeting a reporting requirement. It meant having reliable information on time, exactly when it was needed most.

Beyond the pandemic

The same pattern (secure form, automatic validation and back-end integration) works for many other processes in healthcare and beyond: authorizations, document intake, regulatory reporting, receiving results or exchanging files with partners. If your organization still consolidates sensitive information by email or in spreadsheets, that process deserves a second look. At Redsis we combine more than 25 years of mission-critical platform experience with Fortra automation and integration solutions such as GoAnywhere MFT and JAMS.