Faxage is an internet fax service that provides tools for sending and receiving faxes via email, web interface, or API.

With Faxage, organizations can securely send and receive faxes via email, web interface, or API, and manage their fax communications digitally. This helps them streamline fax workflows, reduce costs associated with traditional fax machines, and improve overall efficiency in handling faxed documents.

Is Faxage HIPAA compliant? Yes, based on our research, Faxage can be HIPAA compliant.

 

What changed this year?

As of October 2026, our review did not identify any publicly disclosed changes to Faxage's HIPAA-related policies or BAA terms. Faxage's parent company, EC Data Systems, holds HITRUST r2 certification covering Faxage's in-scope facilities, most recently recertified in October 2024 on its standard two-year cycle.

 

Will Faxage sign a business associate agreement (BAA)?

Yes, Faxage will sign a business associate agreement, available free of charge on every plan tier with no special "HIPAA plan" required. The BAA is not automatically included at signup, it must be requested by emailing support@faxage.com.

 

What does the Faxage BAA cover?

The Faxage BAA covers the use and disclosure of protected health information (PHI), stating, "FAXAGE offers HIPAA compliant, quality, competitively priced, and secure Internet Fax services. Our in-scope facilities and platforms have achieved HITRUST Certification, underscoring our commitment to appropriately managing risk."

Their HIPAA-supporting security features include:

  • SSL/TLS encryption for all web and API-based faxing
  • SSL/TLS email transport encryption
  • Password-protected incoming fax PDFs
  • PGP encryption support
  • Full internet fax system auditing to track user activity within the account

 

What does the Faxage BAA exclude?

Faxage is explicit that HIPAA compliance is a shared responsibility: "It is our responsibility to put required mechanisms in place which allow you to comply with HIPAA through using our online fax services appropriately. It is your responsibility to utilize the mechanisms that we provide in order to maintain your compliance." Faxage provides a HIPAA Faxing Checklist and setup video to help customers configure their account correctly, since signing the BAA alone does not activate every available safeguard.

 

Conclusion

Faxage signs a BAA and is therefore HIPAA compliant.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA is designed to protect the privacy and security of individuals' health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.