HIPAA Compliant

HIPAA Compliant Fax
for Healthcare Providers

Send and receive faxes with 256-bit encryption, a free self-serve BAA, and audit logging. Trusted by healthcare providers across the US.

7 day free trial.

What makes a fax service HIPAA compliant?

HIPAA requires that any service handling protected health information (PHI) implements administrative, physical, and technical safeguards. A compliant fax service must encrypt data, maintain audit trails, and provide a Business Associate Agreement.

Business Associate Agreement

Free on every paid plan. Activate it yourself in Settings → HIPAA BAA (coming soon) — no sales calls, no paperwork. Your account is not covered by a BAA until you sign it.

256-bit encryption

TLS 1.2 or higher for all transmissions in transit. AES-256 encryption for all stored documents at rest. Like every fax service, the final telephone leg to a physical fax machine is not encrypted.

Complete audit trail

Every fax sent is logged with timestamp, sender, recipient, and status. Exportable audit reports for compliance.

Access controls

Role-based access controls ensure only authorized users can view sensitive faxes and protected health information.

US-based infrastructure

All fax data is stored and processed on US-based servers in Google Cloud us-central1, on SOC 2 Type II certified infrastructure.

Automatic session management

Automatic session timeouts, secure login, and multi-factor authentication options to prevent unauthorized access.

Sign your BAA online in minutes

No sales calls. No paperwork. No waiting.

1

Sign up for any paid plan

Solo, Practice, or Multi-site — the BAA is free on all of them. Start with a free trial.

2

Sign BAA online

Open Settings → HIPAA BAA (coming soon) and sign the BAA electronically. Your account is not covered by a BAA until you do.

3

Start faxing securely

Once your BAA is executed, send and receive faxes containing PHI. No waiting period.

Who needs HIPAA compliant fax?

Any healthcare provider or organization that handles protected health information (PHI) is required by law to use HIPAA compliant communication methods — including faxing.

Doctors & physicians
Dental practices
Therapists & counselors
Pharmacies
Hospitals & health systems
Health insurance companies

HIPAA compliance checklist

Business Associate Agreement (BAA)
TLS 1.2+ in-transit encryption
AES-256 at-rest encryption
Audit log of every fax sent
Role-based access controls
US-based data processing
Automatic session timeouts
Secure document retention
Multi-factor authentication
HIPAA training resources

Frequently asked questions

A HIPAA compliant fax service must provide a Business Associate Agreement (BAA), encrypt all data in transit and at rest, maintain audit trails, implement access controls, and store data on secure US-based servers. usfax.com supports all of these once your BAA is signed.

Yes. A HIPAA Business Associate Agreement (BAA) is available free on every paid plan. You activate it yourself in Settings → HIPAA BAA (coming soon) — no sales call needed. Until you sign it, your account is not covered by a BAA and is not configured for protected health information.

usfax.com uses TLS 1.2 or higher for all fax transmissions in transit and AES-256 encryption for stored documents at rest. Like every fax service, the final telephone leg to a physical fax machine is not encrypted.

Yes, once your BAA is signed. With an executed BAA (free on every paid plan, activated in Settings → HIPAA BAA, coming soon) you can fax patient records, referrals, prescriptions, lab results, prior authorizations, and other protected health information (PHI). Do not send PHI before your BAA is in place.

Any organization that handles protected health information (PHI) needs HIPAA compliant faxing. This includes doctors' offices, dental practices, therapists, pharmacies, hospitals, health insurance companies, and their business associates.

There is no separate HIPAA tier. The BAA is free on every paid plan — Solo ($19/month, 300 pages), Practice ($29/month, 800 pages, 3 users), and Multi-site ($59/month, unlimited pages, 10 users, audit trail). You activate it yourself in Settings → HIPAA BAA (coming soon).

Yes. Traditional fax machines leave documents sitting in an open tray where anyone can read them. Online faxing with usfax.com encrypts documents in transit (TLS 1.2+) and at rest (AES-256), requires authentication to access, and maintains a complete audit trail.

Once the Settings → HIPAA BAA section launches (coming soon), open it from your account settings on any paid plan and sign the BAA electronically — no phone calls, no paperwork. Until you sign it, your account is not covered by a BAA.

Start Faxing Today — Free Trial

Join thousands of US businesses that have ditched the fax machine. No credit card required.