Security & Privacy

Security & Privacy.
How usfax.com Protects Your Faxes

TLS 1.2+ in transit, AES-256 at rest, US-based infrastructure, and strict access controls protect your faxes from upload through storage.

7 day free trial.

Security at every layer

From transmission to storage, your faxes are protected with industry-leading security measures.

256-bit AES encryption

All stored fax documents are encrypted with AES-256, the NIST-standardized cipher (FIPS 197).

TLS 1.2+ in transit

Every fax transmission is protected with TLS 1.2 or higher. Data is never sent in plaintext between our servers and your device.

At-rest encryption

Documents stored on our servers are encrypted at rest using AES-256. Encryption keys are managed with strict access policies.

US-based data centers

All fax data is stored and processed in US data centers (Google Cloud us-central1), which hold SOC 2 Type II certification.

Access controls

Role-based access controls, multi-factor authentication, and automatic session timeouts protect your account and documents.

Audit logs

Every fax sent is logged with a timestamp, the user who sent it, and the originating IP address, in a tamper-evident record you can export.

HIPAA-ready on every paid plan

A HIPAA Business Associate Agreement (BAA) is available free on every paid plan. You activate it yourself in Settings → HIPAA BAA (coming soon). Until you sign it, your account is not covered by a BAA and is not configured for protected health information (PHI).

HIPAA compliance checklist

Business Associate Agreement (BAA) — free on every paid plan, activate in Settings → HIPAA BAA (coming soon)
TLS 1.2 or higher encryption for all transmissions
AES-256 encryption for stored documents
Audit log of every fax sent
Role-based access controls (RBAC)
Automatic session timeouts
Secure document retention & deletion
US-based data storage & processing

Enterprise infrastructure

Built on trusted, certified infrastructure designed for reliability and security.

SOC 2 certified cloud infrastructure

Our platform runs on Google Cloud, whose data centers hold SOC 2 Type II certification, with 24/7 physical security, biometric access, and redundant power. usfax has not yet completed its own SOC 2 audit — see our roadmap below.

Redundancy & uptime

Geographically distributed servers with automatic failover ensure 99.9% uptime. Your faxes are delivered even during outages.

SOC 2 roadmap

USFax is actively pursuing SOC 2 Type II certification for our own platform. Our infrastructure partners already hold SOC 2 Type II certification.

Your privacy matters

We collect only what is necessary to deliver your faxes. We never sell your data.

Data we collect

Account information (name, email), fax documents (stored encrypted), fax metadata (numbers, timestamps), and usage data needed to operate the service.

Data we never sell

We do not sell, rent, or share your personal information or fax content with third parties for marketing purposes. Your documents belong to you.

Data retention & deletion

Fax documents are retained per your plan settings, and you can delete individual faxes at any time. To delete your account and its data, email support@usfax.com — deletion requests are completed within 30 days.

Start Faxing Today — Free Trial

Join thousands of US businesses that have ditched the fax machine. No credit card required.