How do the Healthcare (HIPAA) plans work?
If your organization handles protected health information — a practice, a therapist, a billing service — the Healthcare plans let you fax it with a signed Business Associate Agreement and the compliance controls to match. Here is exactly what they include and how to start.
Last updated: July 2026
What the Healthcare plans are, and who they are for
The Healthcare plans are for organizations that fax protected health information (PHI) — medical and dental practices, therapists and behavioral-health providers, medical billing services, home-health agencies, and anyone else who is a covered entity or business associate under HIPAA. They are the only FaxTerra plans that come with a Business Associate Agreement (BAA). If you handle PHI, this is the plan you need; the ordinary Free, Starter, Business, and Pro plans do not include a BAA.
The three Healthcare tiers
There are three tiers. They differ only in how many pages a month they include — the compliance controls are identical on every one, so you are only choosing a page allowance:
- Healthcare Solo — $19.99 a month, 300 pages a month. For solo practitioners & therapists.
- Healthcare Practice — $39.99 a month, 1000 pages a month. For small & mid-size practices.
- Healthcare Group — $79.99 a month, 2500 pages a month. For group practices & billing services.
Billing is monthly, and every tier includes your own dedicated fax number so you can receive as well as send. If you need more pages than the largest tier, reach out and we will put a plan together for you.
What every Healthcare plan includes
Every tier carries the same controls — the difference between them is only the page allowance:
- A signed Business Associate Agreement (BAA) with FaxTerra, executed at signup before you send any PHI.
- Per-document encryption while stored: each fax is encrypted with its own key (AES-256), on top of encrypted storage and an encrypted connection while it travels.
- A six-year audit log: every time a document is viewed, downloaded, or sent, it is recorded — and you can export the log for your own compliance reviews.
- PHI-free notification emails: the emails telling you a fax arrived or was delivered contain no names, no fax numbers, and no document details — you sign in to view the fax itself.
- Encrypted sending and receiving on your own number.
Our own storage, database, hosting, and error-monitoring vendors operate under their own BAAs with us, so your PHI stays inside that chain.
How to sign up (plans first, sign the BAA at checkout)
Start on the Healthcare page and pick the tier you want. At checkout you execute the BAA inline — you provide your organization, the name and title of the person authorized to sign, and accept the BAA and HIPAA service terms — and then your plan activates. You see the pricing first and sign the agreement at checkout, not before. Healthcare plans are signed up for on the web (they are not sold through the iPhone or Android app).
Free and standard plans versus Healthcare
The Free, Starter, Business, and Pro plans are for general faxing and do not include a Business Associate Agreement — so they are not the right choice for sending PHI. If you are a covered entity, choose a Healthcare plan, which adds the BAA and the per-document encryption, audit log, and PHI-free notifications on top of everything a normal subscription does. Documents on a Healthcare plan are kept with the same longer retention as Business and Pro; see what happens to your documents.
What "HIPAA compliant" really means
It is worth being straight about this: HIPAA has no certificate and no certifying body, so no fax service can truthfully call itself "HIPAA-certified." Compliance is a chain of security controls plus signed agreements. What FaxTerra does is put those controls in place — the encryption, the audit log, the PHI-free emails — and sign a BAA covering the storage and processing of your PHI. The telephone-network leg of a fax is carried by outside carriers acting as conduits under HIPAA's conduit exception (78 FR 5571), the same basis on which postal mail, the telephone, and every fax operate; everywhere your documents are actually stored or processed, a BAA is in place.
Canceling, and getting a copy of your BAA
You can cancel a Healthcare plan yourself online, the same way as any subscription — it takes effect at the end of the period you have already paid for. Your executed BAA stays available to download from your account for as long as the account exists, so you always have your copy for your records. See managing your account for how cancellation works.
Frequently Asked Questions
Is FaxTerra HIPAA compliant?
On a Healthcare plan, yes — FaxTerra provides the controls HIPAA requires (a signed BAA, encryption in transit and at rest, an audit log, and PHI-free notifications) for faxing protected health information. There is no such thing as being "HIPAA-certified" — HIPAA has no certificate or certifying body — so we self-attest to those controls and sign a BAA rather than claim a certification no one can actually hold.
Do you sign a Business Associate Agreement (BAA)?
Yes. Every Healthcare-plan account executes a BAA with FaxTerra electronically at signup, before any PHI is transmitted, and you can download your executed copy from your account at any time. The Free, Starter, Business, and Pro plans do not include a BAA.
Is my PHI encrypted?
Yes. On a Healthcare plan each document is individually encrypted while stored — its own key per document (AES-256) — on top of encrypted storage, and it travels over an encrypted connection. A document is only decrypted when you view or download it, and that access is written to your audit log.
Can I cancel a Healthcare plan anytime?
Yes. Cancellation is self-serve online, just like any other plan, and takes effect at the end of your paid period. Your executed BAA remains downloadable from your account for as long as the account exists.