HIPAA-Ready Online Fax
for Healthcare Providers
Encrypted in transit and at rest, an exportable audit log, US data storage, and a free self-serve BAA coming to every paid plan. Not yet in force: do not send PHI until you have signed it.
7 day free trial.
Last updated · BAA status: coming soon; vendor agreements listed on the Subprocessors page.
What HIPAA asks of a fax service
HIPAA requires that any service handling protected health information (PHI) implements administrative, physical, and technical safeguards. A compliant fax service must encrypt data, maintain audit trails, and provide a Business Associate Agreement.
Business Associate Agreement
Coming free to every paid plan. You will sign it yourself in Settings → HIPAA BAA — no sales calls, no paperwork. Your account is not covered by a BAA until you sign it.
256-bit encryption
TLS 1.2 or higher for all transmissions in transit. AES-256 encryption for all stored documents at rest. Like every fax service, the final telephone leg to a physical fax machine is not encrypted.
Complete audit trail
Every fax sent is logged with timestamp, sender, recipient, and status. Exportable audit reports for compliance.
Access controls
Role-based access controls ensure only authorized users can view sensitive faxes and protected health information.
US-based infrastructure
Customer documents are stored only in the United States (Google Cloud, us-central1 region). Our staff access production systems from Israel under logged, least-privilege controls, as disclosed in our Privacy Policy.
Automatic session management
A 12-hour session limit with a 30-minute idle timeout, and optional two-factor authentication with an authenticator app. Once the BAA is signed, two-factor authentication becomes required for every user on the account.
Sign your BAA online — coming soon
No sales calls, no paperwork. Until you have signed it, your account is not covered by a BAA — do not send PHI.
Sign up for any paid plan
Solo, Practice, or Multi-site — the BAA is free on all of them. Start with a free trial.
Sign BAA online
Open Settings → HIPAA BAA (coming soon) and sign the BAA electronically. Your account is not covered by a BAA until you do.
Start faxing securely
Once your BAA is executed, send and receive faxes containing PHI. No waiting period.
Who needs a BAA for faxing?
Any healthcare provider or organization that handles protected health information (PHI) must safeguard it in every channel it uses — including fax — and needs a Business Associate Agreement with any vendor that transmits or stores it.
HIPAA safeguards checklist
Frequently asked questions
HIPAA does not certify fax services; no vendor can be "HIPAA certified". What a covered entity needs from one is a Business Associate Agreement (BAA), encryption in transit and at rest, an audit trail, access controls, and clear data-location and retention terms. usfax.com runs the technical safeguards today and will provide the BAA — free on every paid plan, signed in Settings — when the program launches. Until your BAA is signed, do not send PHI through the service.
Coming soon. A HIPAA Business Associate Agreement (BAA) is coming free to every paid plan. You will sign it yourself in Settings → HIPAA BAA — no sales call needed. Until you sign it, your account is not covered by a BAA and is not configured for protected health information.
usfax.com uses TLS 1.2 or higher for all fax transmissions in transit and AES-256 encryption for stored documents at rest. Like every fax service, the final telephone leg to a physical fax machine is not encrypted.
Yes, once your BAA is signed. With an executed BAA (coming free to every paid plan, signed in Settings → HIPAA BAA) you can fax patient records, referrals, prescriptions, lab results, prior authorizations, and other protected health information (PHI). Do not send PHI before your BAA is in place.
Any organization that handles protected health information (PHI) and uses a vendor to transmit or store it needs a BAA with that vendor. This includes doctors' offices, dental practices, therapists, pharmacies, hospitals, health insurance companies, and their business associates.
There is no separate HIPAA tier. The BAA will be free on every paid plan — Solo ($19/month, 300 pages), Practice ($29/month, 800 pages, 5 users), and Multi-site ($59/month, unlimited pages, 10 users, audit trail). You will sign it yourself in Settings → HIPAA BAA.
Yes. Traditional fax machines leave documents sitting in an open tray where anyone can read them. Online faxing with usfax.com encrypts documents in transit (TLS 1.2+) and at rest (AES-256), requires authentication to access, and maintains a complete audit trail.
Once the Settings → HIPAA BAA section launches (coming soon), open it from your account settings on any paid plan and sign the BAA electronically — no phone calls, no paperwork. Until you sign it, your account is not covered by a BAA.
Start Faxing Today — Free Trial
Ditch the fax machine. No credit card required, 7-day free trial.
Where these commitments are set out
Facts about carriers, regulators and competitors on this page come from the documents below, read on the dates shown. Carrier rules change; when a detail matters for your line, check with your carrier.
- usfax.com Privacy Policy (security measures, staff access, retention) — usfax.com, accessed September 21, 2026.
- usfax.com Terms of Service (cancellation, refunds, porting) — usfax.com, accessed September 21, 2026.
- usfax.com Subprocessors (vendor BAAs in progress) — usfax.com, accessed September 21, 2026.