HIPAA-Compliant Fax for Healthcare Teams
Send and receive PHI with a signed BAA, AES-256 encryption at rest, and a complete audit trail on every document. Modern online fax that satisfies your compliance officer — priced for small practices, not enterprise budgets.
Add HIPAA compliance to any plan and sign your BAA before checkout. Cancel anytime, online.
Compliance that’s built in, not bolted on
HIPAA has no certificate — it’s a chain of controls and agreements. Here’s ours, in plain language, or see how we implement each HIPAA control.
A signed BAA, self-serve
Every account with HIPAA compliance executes a Business Associate Agreement with FaxTerra before checkout. No sales call, no negotiation cycle. Download your executed copy anytime.
Per-document encryption
Every fax is encrypted with AES-256-GCM using a unique per-document key, on top of encrypted storage and TLS in transit. Documents are only decrypted for you, at view time.
A complete audit trail
Every view and download of a document is logged (who, what, when, from where) and retained for six years. Ask support and we send you your log as a file for your own compliance reviews.
BAAs down the whole chain
Our infrastructure vendors — AWS storage, database, hosting, error monitoring — operate under their own BAAs with us. Your PHI never touches a vendor outside the chain.
Pricing for practices of any size
The big consumer fax brands gate the signed BAA behind a business tier. We make it a $4.99 add-on on any plan, billed monthly or annually.
| FaxTerra + HIPAA | eFax Protect | |
|---|---|---|
| 1,000 pages/month | $34.98 · Pro + HIPAA | $50 |
| 200 pages/month | $14.98 · Business + HIPAA | $50 |
| Smallest plan with a BAA | $9.98 · 50 pages | $50 · 1,000 pages |
| Signed BAA | Self-serve at signup | |
| Per-document encryption at rest | AES-256-GCM | Not published |
| Audit log | 6-year retention, sent on request | Not published |
| Cancel online | Self-serve | Annual and multi-number plans must call |
Against the healthcare specialist, the difference is the terms rather than the price. Documo’s Solo plan carries 300 pages for $25.00/mo; our Business plan with HIPAA compliance carries 200 pages at $14.98/mo. The part that matters more is how you pay it: their pricing page shows that price as billed annually under both the monthly and the yearly toggle, so the entry is $300 committed up front, and their BAA is an email-and-return process. Ours bills monthly and is signed at checkout.
What we compete on is the terms, not a price ranking. The BAA is signed at checkout instead of requested by email. Billing is monthly with no annual commitment, counted by the page rather than by the minute, and cancelling is a button in your account.
eFax Protect pricing as of July 2026; Documo figures from their own pricing page, verified 28 August 2026. Competitor pricing changes regularly.
Add HIPAA to any plan for $4.99 a month
The same compliance controls on every plan. You’re only choosing a page allowance. Every plan includes a dedicated number and as many people as you like.
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
Need more than 1,000 pages a month? Talk to us and we’ll put a plan together for you.
Get set up in minutes
Sign your BAA
Executed electronically during signup. Your copy is stored in your account.
Get your fax number
A dedicated number for your practice — patients, pharmacies, and payers fax you directly.
Send & receive PHI
Records requests, referrals, prior auth — from any browser or the app for iPhone and Android, fully logged.
Keep the number your referrals already use
A practice fax number lives on referral pads, intake and release forms, payer directories, and every chart note that ever listed it. Changing it means chasing every referring office that still has the old one. You can move the number instead: transferring a US or Canada number in is free on every paid plan, and your current fax service keeps receiving until the transfer completes, so no referral falls into a gap.
Check whether your number can move, or read how fax number porting works.
Questions your compliance officer will ask
Do you sign a Business Associate Agreement?
Yes. Every account with HIPAA compliance executes a BAA with FaxTerra electronically before checkout, before any PHI is transmitted. You can download your executed BAA from your account settings at any time.
How is PHI protected at rest and in transit?
Documents are encrypted in transit with TLS 1.2+ and at rest twice over: storage-level encryption plus per-document AES-256-GCM application-layer encryption with unique keys per document. Decryption happens only when an authorized user views or downloads a document — and that access is logged.
Can I keep the fax number our practice already uses?
Yes. Port your existing US or Canada fax number in, free with any paid plan, so the number already printed on your referral pads, intake forms, and directory listings comes with you. Your current provider drives the transfer, so it takes from about a business day to a few weeks, and your existing fax service keeps working until it completes. Your number also stays yours: if you ever leave, you can port it back out at any time, free — we don't hold your number or charge a fee to leave.
Are email notifications HIPAA-safe?
Notification emails for accounts with HIPAA compliance contain no PHI: no names, no fax numbers, no document details. They say a fax arrived and link you to your encrypted inbox, where you authenticate to view it.
What about the phone-network leg of a fax?
The telecom transmission itself is handled by carriers acting as conduits under HIPAA's conduit exception (78 FR 5571) — the same basis on which every fax, phone, and postal transmission operates. Everywhere your documents are stored or processed, a BAA is in place.
Who is this for, and who is it not for?
Small and mid-size practices, billing services, therapists, home-health agencies, and anyone who handles PHI over fax. If you need EHR integration or enterprise SSO, we're not there yet — we'll say so rather than sell you.
When can I start?
Now. Choose a plan, sign your Business Associate Agreement at checkout, and you can send and receive PHI right away. No sales call, no waiting.
More questions? The help center explains how HIPAA compliance works in more detail: the BAA, the audit log, and what each tier includes. The agreement template itself, with the subprocessor list and the retention table, is on the Trust Center.
Fax PHI the compliant way
Sign your BAA, pick your plan, and start sending and receiving encrypted, logged faxes in minutes.