Is eFax HIPAA Compliant?

Monica McCormack
Published: October 26, 2020•Last Updated: July 15, 2024•Read Time: 2 min

Summary

With a signed business associate agreement, eFax can meet HIPAA requirements for handling PHI. The platform offers administrative access controls with unique login credentials and forwarding restrictions, audit controls that automatically archive and track transmissions, encryption in transit and at rest, VPN transmission security, and EHR integration to support faxing of patient records.

Track and Manage Your Compliance
The Guard compliance dashboard
Unlock the Secrets to Effective Risk Assessments
Understanding and Applying Risk Assessment Procedures in Healthcare Compliance guide cover

eFax is a software provider that allows users to send and receive faxes via email easily.

But is eFax HIPAA compliant? Is eFax secure? Whether or not eFax is a HIPAA compliant fax service is discussed.

Is eFax HIPAA Compliant: Security Features

For a software provider to be considered HIPAA compliant, it must enable security features to safeguard protected health information (PHI). As such, a HIPAA compliant fax service requires certain security features. 

eFax, a HIPAA compliant online fax service, offers the following security features to secure sensitive data:

Is eFax HIPAA Compliant

Access Controls. eFax allows administrators to designate access to data to authorized users through the user of unique login credentials. Their software also prevents users from forwarding emails to other users who are not authorized to access the data.

Audit Controls. eFax automatically archives faxes and tracks which users transmit the faxes.

Encryption. Faxes sent through eFax are encrypted while in motion (when the fax is sent) and at rest (stored faxes).

Transmission Security. Faxes are transmitted through a virtual private network (VPN) preventing unauthorized users from accessing the data as it is transmitted.

If you’re still wondering if eFax is safe and want to find out more about eFax and HIPAA, please click here. 

Rated #1 on G2

“Compliancy Group makes a highly complex process easy to understand.”

G2 Best Software Logo

Is eFax HIPAA Compliant: Business Associate Agreements

Software providers are considered business associates under the HIPAA regulation, and as such healthcare providers wishing to use their service must first have a signed business associate agreement (BAA). When a software provider is unwilling or unable to sign a BAA, they cannot be used in conjunction with PHI. Luckily, eFax is willing to sign a BAA with their healthcare clients.

Is eFax HIPAA Compliant?

Is eFax HIPAA compliant? Yes, eFax is a HIPAA compliant fax service, provided that users have a signed BAA with eFax before utilizing their service. eFax also enables users to integrate their electronic medical records (EHRs) with the platform, allowing users to easily fax patient files.

Complete Compliance Solution

Make sure your business and the tools you use to run it are compliant.

Global CTAs Image

About the Author

Director of Content Strategy

Monica McCormack has 5 years of experience as a compliance copywriter and editor. She is well-versed in a diverse range of compliance topics including HIPAA, OSHA, and state privacy laws. She specializes in simplifying regulatory compliance, making it easy to understand for a general audience.

Monica has a background in marketing and is responsible for creating all forms of written content, including articles, resources, press releases, and case studies. She also works with Compliancy Group's association partners to deliver educational content for members.