HIPAA-Compliant Fax for Healthcare Teams
Send and receive PHI with a signed BAA, AES-256 encryption at rest, and a complete audit trail on every document. Modern online fax that satisfies your compliance officer — priced for small practices, not enterprise budgets.
Every plan includes a signed BAA, executed at signup. Cancel anytime, online.
Compliance that’s built in, not bolted on
HIPAA has no certificate — it’s a chain of controls and agreements. Here’s ours, in plain language, or see how we implement each HIPAA control.
A signed BAA, self-serve
Every healthcare account executes a Business Associate Agreement with FaxTerra during signup — no sales call, no negotiation cycle. Download your executed copy anytime.
Per-document encryption
Every fax is encrypted with AES-256-GCM using a unique per-document key, on top of encrypted storage and TLS in transit. Documents are only decrypted for you, at view time.
A complete audit trail
Every view, download, and send of a document is logged — who, what, when, from where — and retained for six years, exportable for your own compliance reviews.
BAAs down the whole chain
Our infrastructure vendors — AWS storage, database, hosting, error monitoring — operate under their own BAAs with us. Your PHI never touches a vendor outside the chain.
Honest pricing for practices of any size
The incumbents price HIPAA fax like enterprise software. We don’t.
| FaxTerra Healthcare | eFax Protect | |
|---|---|---|
| 1,000 pages/month | $39.99 | $50 |
| 2,500 pages/month | $79.99 | $100 |
| Smallest plan | $19.99 · 300 pages | $50 · 1,000 pages |
| Signed BAA | Self-serve at signup | |
| Per-document encryption at rest | AES-256-GCM | Storage-level |
| Audit log you can export | 6-year retention | |
| Cancel online | One click | Phone call required |
eFax Protect pricing as of July 2026. Competitor pricing changes regularly.
Choose your plan
Every plan carries the identical compliance controls — you’re only choosing a page allowance.
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
- Signed BAA + full HIPAA controls
- Dedicated fax number
- Send & receive, encrypted + logged
- Cancel anytime, online
Need more than 2,500 pages a month? Talk to us and we’ll put a plan together for you.
Get set up in minutes
Sign your BAA
Executed electronically during signup. Your copy is stored in your account.
Get your fax number
A dedicated number for your practice — patients, pharmacies, and payers fax you directly.
Send & receive PHI
Records requests, referrals, prior auth — from any browser or our iOS app, fully logged.
Questions your compliance officer will ask
Do you sign a Business Associate Agreement?
Yes. Every Healthcare-plan account executes a BAA with FaxTerra electronically at signup, before any PHI is transmitted. You can download your executed BAA from your account settings at any time.
How is PHI protected at rest and in transit?
Documents are encrypted in transit with TLS 1.2+ and at rest twice over: storage-level encryption plus per-document AES-256-GCM application-layer encryption with unique keys per document. Decryption happens only when an authorized user views or downloads a document — and that access is logged.
Are email notifications HIPAA-safe?
Notification emails for Healthcare accounts contain no PHI — no names, no fax numbers, no document details. They say a fax arrived and link you to your encrypted inbox, where you authenticate to view it.
What about the phone-network leg of a fax?
The telecom transmission itself is handled by carriers acting as conduits under HIPAA's conduit exception (78 FR 5571) — the same basis on which every fax, phone, and postal transmission operates. Everywhere your documents are stored or processed, a BAA is in place.
Who is this for — and who is it not for?
Small and mid-size practices, billing services, therapists, home-health agencies, and anyone who handles PHI over fax. If you need EHR integration or enterprise SSO, we're not there yet — we'll say so rather than sell you.
When can I start?
Now. Sign your Business Associate Agreement at signup, choose your plan, and you can send and receive PHI right away — no sales call, no waiting.
Fax PHI the compliant way
Sign your BAA, pick your plan, and start sending and receiving encrypted, logged faxes in minutes.