How does HIPAA compliance work on FaxTerra?
If your organization handles protected health information — a practice, a therapist, a billing service — you add HIPAA compliance to any paid plan. It brings a signed Business Associate Agreement and the controls to match. Here is exactly what it includes, what it costs, and how to add it.
What the HIPAA add-on is, and who it is for
HIPAA compliance is an add-on to any paid plan — $4.99 a month, or $49.99 a year on an annual plan — for organizations that fax protected health information (PHI): medical and dental practices, therapists and behavioral-health providers, medical billing services, home-health agencies, and anyone else whose faxes carry patient data. It is not a separate plan. Your pages, your number, and your billing stay exactly as they are; the add-on changes what protects them.
If you are a patient faxing your own records, you do not need it: HIPAA obligations fall on covered entities and their business associates, not on individuals sending their own information.
What it costs on each plan
Pick the plan whose page allowance fits, then add HIPAA compliance. The monthly totals:
- Starter + HIPAA: $9.98 a month, 50 pages a month.
- Business + HIPAA: $14.98 a month, 200 pages a month.
- Pro + HIPAA: $34.98 a month, 1,000 pages a month.
Annual billing is available on every plan, and you pick the period on the same card you pick the plan; the add-on then bills at $49.99 a year alongside an annual plan. Every plan includes your own dedicated fax number, so you can receive as well as send, and as many people on the account as you like.
What the add-on includes
The same controls on every plan:
- A signed Business Associate Agreement (BAA) with FaxTerra, executed before you send any PHI.
- Per-document encryption at rest — each stored document has its own AES-256 key, on top of encrypted storage and an encrypted connection in transit.
- A six-year audit log. Every view and download of a document is recorded and kept for six years, and you can ask support for a copy of it for your own compliance reviews.
- PHI-free notifications, email and mobile push — arrival and delivery notices carry no names, fax numbers, or document details; you sign in to see the fax.
- One-year inbox retention by default, and control over how long sent documents are kept.
- A BAA everywhere PHI is stored or processed — our storage, database, hosting, and error-monitoring vendors each operate under their own BAA with FaxTerra.
How to add it
New to FaxTerra? Start on the HIPAA page, choose a plan, and you will sign the BAA before checkout — your organization, the name and title of the person authorized to sign, and acceptance of the BAA and HIPAA service terms. The signed copy is emailed to you the moment it is executed, and stays on your HIPAA compliance page. The add-on is in the same checkout as the plan.
Already subscribed on the web? Open HIPAA compliance in your account. You sign the BAA if one is not on file yet, then confirm the add-on: the confirmation states the exact amount for the rest of your current billing period, whether it is charged today or added to your next invoice, and what your subscription becomes from then on. On a team account, adding it is something admins and the owner do.
Bought your plan in the iPhone or Android app? Add it there, on the Billing screen, at $4.99 a month or $49.99 a year, the same as on the website. You can sign the Business Associate Agreement in the app or on the web; either one counts on your account. Where the add-on is bought follows who bills your plan, which billing and who bills you sets out in full.
Plans without the add-on
Without HIPAA compliance, no plan includes a Business Associate Agreement — so none of them is the right choice for sending PHI. Add it before the first fax that carries patient data; documents on the account are then encrypted with per-document keys going forward, and the sweep also covers documents already stored.
What "HIPAA compliant" really means
It is worth being straight about this: HIPAA has no certificate and no certifying body, so no fax service can truthfully call itself "HIPAA-certified." Compliance is a chain of security controls plus signed agreements. What FaxTerra does is provide the controls above and sign a BAA covering the storage and processing of your PHI. The telephone-network leg of a fax is carried by telecom conduits under HIPAA's conduit exception (78 FR 5571), the same basis on which every fax, phone call, and letter operates.
Removing it, and getting a copy of your BAA
If you added it on the web, remove it yourself from Plans & Billing; it is rare, and the line is there rather than on the HIPAA page so it is not mistaken for a routine control. Removing it credits the unused remainder of the period on your next invoice. Cancelling the plan on the web ends the add-on with it, because there it is a line on the same subscription; the cancel confirmation says so.
If you added it in the app, cancel it in the App Store or Google Play, where you cancel any subscription. It is a separate subscription from your plan there: cancelling the plan does not cancel it, and cancelling it does not cancel the plan, so cancel both if you are leaving. Billing and who bills you has the steps for each store.
Either way your executed BAA stays available to download from HIPAA compliance in your account for as long as the account exists, and documents encrypted while the add-on was on stay readable.
Frequently Asked Questions
Is FaxTerra HIPAA compliant?
With the HIPAA compliance add-on, yes — FaxTerra provides the controls HIPAA requires (a signed BAA, encryption in transit and at rest, an audit log, and PHI-free notifications) for faxing protected health information. There is no such thing as a HIPAA certification, so we describe the controls rather than claim a badge.
Do you sign a Business Associate Agreement (BAA)?
Yes. Every account with HIPAA compliance executes a BAA with FaxTerra electronically before the add-on activates, and you can download your executed copy from your account at any time. Without the add-on, no plan includes a BAA.
How much does HIPAA compliance cost?
$4.99 a month on top of any paid plan, or $49.99 a year with an annual plan. It is the same price in the iPhone and Android apps. The plan sets your page allowance; the add-on sets the protections.
Is my PHI encrypted?
Yes. With the add-on each document is individually encrypted while stored — its own key per document (AES-256) — on top of encrypted storage, and it travels over an encrypted connection. A document is only decrypted when you view it.
Can I cancel HIPAA compliance anytime?
Yes. If you added it on the web, remove it from Plans & Billing or cancel the whole plan; either is self-serve online. If you added it in the app, cancel it in the App Store or Google Play, where it is a separate subscription from your plan, so cancel both if you are leaving. Your executed BAA remains downloadable from HIPAA compliance in your account for as long as the account exists.