HIPAA add-on
HIPAA-ready fax, with a BAA included.
Turn on HIPAA mode for any account that handles protected health information. FaxDev signs a business associate agreement and enforces the safeguards that support HIPAA compliance: two-step sign-in, link-only notifications, and a logged record of every document view.
$50.00 per account per month, on top of normal page and number prices.
What the add-on includes
Eight safeguards, enforced on every HIPAA account.
Not settings a user can switch off: while HIPAA mode is on, the platform holds them in place.
Business associate agreement included
Your organization owner reads and accepts our BAA in the console. The accepted version, who accepted it, and when are recorded, and you can download a copy at any time.
Two-step verification enforced
Every user of a HIPAA account signs in with an authenticator app. Sessions sign out after 15 minutes of inactivity, and opening a document asks for a recent sign-in.
Link-only notifications
Received-fax emails never carry the document. They link to the web app, which requires sign-in, so a forwarded or misdirected email exposes nothing.
Access logging on every document view
Every view or download, by a person, an API key, an AI agent, or our own staff, is written to the audit log with who, when, from where, and how. Documents stream through an authenticated request instead of a reusable link.
Six-year audit trail
Audit records are kept for six years, independently of how long documents are kept, and can be exported as CSV or JSON.
Retention controls up to seven years
HIPAA accounts keep documents for at least six years, and retention can be set up to seven. A minimum set by us cannot be lowered from the account.
Legal hold
A hold suspends every deletion on an account, by retention or by a user, until it is lifted.
Encryption in transit and at rest
The web app and API are HTTPS only. Stored documents, database volumes, and backups are encrypted at rest.
Price
$50.00 per account per month.
Prorated by day from the day HIPAA mode is turned on. Only accounts with HIPAA mode are charged; the BAA, the audit trail, and every safeguard above are included. Pages and numbers keep their usual pay-as-you-go prices.
$50.00 per account per month
Resellers turn HIPAA mode on per customer account and set their own price for it. Wholesale terms: [email protected].
Who it is for
Covered entities and the businesses that work for them.
Clinics and practices
Referrals, records requests, prescriptions, and prior authorizations.
Healthcare software vendors
EHR, practice management, and patient intake products that send and receive fax through the API or MCP server.
Billing and revenue cycle teams
Claims attachments, eligibility responses, and payer correspondence.
Resellers serving healthcare
MSPs and partners who resell fax to covered entities, with HIPAA mode per customer account.
How to enable
Four steps, all in the console.
- Step 1Open ComplianceSign in as an organization owner and open Compliance in the web app.
- Step 2Accept the BAARead the agreement, tick the box, and type your name. The acceptance is recorded and a copy is available to download.
- Step 3Turn on HIPAA modeEnable it on each account that handles protected health information. Other accounts are unchanged and are not charged.
- Step 4Users enrollEach user of that account sets up two-step verification at their next sign-in. Everything else applies right away.
What we do and do not claim
The HIPAA add-on supports HIPAA compliance; it does not make an organization compliant by itself, and there is no official HIPAA certification for any fax service to hold. Your policies, workforce training, and who you give access to remain your responsibility. See Security for the controls every account gets.
HIPAA fax questions
Is the service HIPAA compliant?
HIPAA compliance is a shared responsibility, so no fax service can make you compliant on its own, and there is no official HIPAA certification for anyone to hold. The HIPAA add-on supports HIPAA compliance: we sign a business associate agreement and enforce the safeguards on this page for every account that has it turned on. Your own policies, training, and access decisions remain your part.
Do you sign a business associate agreement (BAA)?
Yes. The BAA is included with the HIPAA add-on. An organization owner accepts it in the console before HIPAA mode can be turned on, and a copy of the accepted version can be downloaded at any time.
What does the HIPAA add-on cost?
$50.00 per account per month, prorated by day from the day HIPAA mode is turned on, on top of the normal per-page and per-number prices. Accounts without HIPAA mode are not charged for it.
What changes for my users?
They sign in with two-step verification, are signed out after 15 minutes of inactivity, and are asked to confirm a recent sign-in before opening a document. Received-fax emails link to the document instead of attaching it.
Can I turn HIPAA mode on for some accounts only?
Yes. HIPAA mode and its charge are per account. Turn it on for the accounts that handle protected health information and leave the rest as they are.
How long are documents and audit records kept?
With HIPAA mode, documents are kept for at least six years and retention can be set up to seven. Audit records, including every document view and download, are kept for six years. A legal hold suspends deletion entirely.
Is the fax itself encrypted on its way to the receiving fax machine?
No fax is: once a fax leaves our network it travels over public networks to the receiving fax machine like any other fax. Our safeguards cover the documents we store, the people and systems that can open them, and how every access is recorded.
Can resellers offer HIPAA mode to their customers?
Yes. Resellers turn it on per customer account and set their own price for it, as with every other price. Contact us for wholesale terms.