How does HIPAA compliance work on FaxTerra?
If your organization handles protected health information — a practice, a therapist, a billing service — you add HIPAA compliance to any paid plan. It brings a signed Business Associate Agreement and the controls to match. Here is exactly what it includes, what it costs, and how to add it.
What the HIPAA add-on is, and who it is for
HIPAA compliance is an add-on to any paid plan — $5.00 a month, or $50.00 a year on an annual plan — for organizations that fax protected health information (PHI): medical and dental practices, therapists and behavioral-health providers, medical billing services, home-health agencies, and anyone else whose faxes carry patient data. It is not a separate plan. Your pages, your number, and your billing stay exactly as they are; the add-on changes what protects them.
If you are a patient faxing your own records, you do not need it: HIPAA obligations fall on covered entities and their business associates, not on individuals sending their own information.
What it costs on each plan
Pick the plan whose page allowance fits, then add HIPAA compliance. The monthly totals:
- Starter + HIPAA: $9.99 a month, 50 pages a month.
- Business + HIPAA: $14.99 a month, 200 pages a month.
- Pro + HIPAA: $34.99 a month, 1,000 pages a month.
Annual billing is available on every plan, and the add-on bills at $50.00 a year alongside an annual plan (the annual figure is shown at checkout). Every plan includes your own dedicated fax number, so you can receive as well as send, and as many people on the account as you like.
What the add-on includes
The same controls on every plan:
- A signed Business Associate Agreement (BAA) with FaxTerra, executed before you send any PHI.
- Per-document encryption at rest — each stored document has its own AES-256 key, on top of encrypted storage and an encrypted connection in transit.
- A six-year audit log — every view, download, and send of a document is recorded and can be exported for your own compliance reviews.
- PHI-free notification emails — arrival and delivery notices carry no names, fax numbers, or document details; you sign in to see the fax.
- One-year inbox retention by default, and control over how long sent documents are kept.
- A BAA everywhere PHI is stored or processed — our storage, database, hosting, and error-monitoring vendors each operate under their own BAA with FaxTerra.
How to add it
New to FaxTerra? Start on the HIPAA page, choose a plan, and you will sign the BAA before checkout — your organization, the name and title of the person authorized to sign, and acceptance of the BAA and HIPAA service terms. The add-on is in the same checkout as the plan.
Already subscribed? Open HIPAA compliance in your account. You sign the BAA if one is not on file yet, then confirm the add-on: the confirmation states the exact amount for the rest of your current billing period, whether it is charged today or added to your next invoice, and what your subscription becomes from then on. On a team account, adding it is something admins and the owner do.
Plans without the add-on
Without HIPAA compliance, no plan includes a Business Associate Agreement — so none of them is the right choice for sending PHI. Add it before the first fax that carries patient data; documents on the account are then encrypted with per-document keys going forward, and the sweep also covers documents already stored.
What "HIPAA compliant" really means
It is worth being straight about this: HIPAA has no certificate and no certifying body, so no fax service can truthfully call itself "HIPAA-certified." Compliance is a chain of security controls plus signed agreements. What FaxTerra does is provide the controls above and sign a BAA covering the storage and processing of your PHI. The telephone-network leg of a fax is carried by telecom conduits under HIPAA's conduit exception (78 FR 5571), the same basis on which every fax, phone call, and letter operates.
Removing it, and getting a copy of your BAA
You can remove HIPAA compliance yourself from Plans & Billing; it is rare, and the line is there rather than on the HIPAA page so it is not mistaken for a routine control. Removing it credits the unused remainder of the period on your next invoice. Your executed BAA stays available to download from your account for as long as the account exists, and documents encrypted while the add-on was on stay readable.
Frequently Asked Questions
Is FaxTerra HIPAA compliant?
With the HIPAA compliance add-on, yes — FaxTerra provides the controls HIPAA requires (a signed BAA, encryption in transit and at rest, an audit log, and PHI-free notifications) for faxing protected health information. There is no such thing as a HIPAA certification, so we describe the controls rather than claim a badge.
Do you sign a Business Associate Agreement (BAA)?
Yes. Every account with HIPAA compliance executes a BAA with FaxTerra electronically before the add-on activates, and you can download your executed copy from your account at any time. Without the add-on, no plan includes a BAA.
How much does HIPAA compliance cost?
$5.00 a month on top of any paid plan, or $50.00 a year with an annual plan. The plan sets your page allowance; the add-on sets the protections.
Is my PHI encrypted?
Yes. With the add-on each document is individually encrypted while stored — its own key per document (AES-256) — on top of encrypted storage, and it travels over an encrypted connection. A document is only decrypted when you view it.
Can I cancel HIPAA compliance anytime?
Yes. Remove it from Plans & Billing, or cancel the whole plan; either is self-serve online. Your executed BAA remains downloadable from your account for as long as the account exists.