HIPAA and JamFax

JamFax does not sign a BAA today

JamFax does not currently offer a Business Associate Agreement (BAA) and does not claim HIPAA compliance. If your organization must send or receive PHI by fax, you need a BAA with your fax provider, and JamFax cannot provide one.

Do not send PHI without a BAA

Do not fax PHI with JamFax. If a document might contain PHI, treat it as PHI and send it through a service that has signed a BAA with you. Decide with your compliance contact which documents fit.

What JamFax does provide

These are general security measures. They are not a HIPAA compliance claim.

• JamFax is only served over HTTPS, and browsers are told never to connect without it.
• Sent and received faxes are stored privately and opened only through short-lived links.
• Two-step sign-in with an authenticator app or a security key.
• You choose how long faxes are kept, and faxes older than that are deleted every night.
• On Corporate Fax, each person sees only their own department's faxes.

Details are on the security page.

Who should choose a service that signs a BAA

Choose a fax service that signs a BAA if you are a HIPAA covered entity, such as a medical or dental office, clinic, pharmacy or health plan, or a business associate that handles PHI for one, such as a billing company, and you fax PHI.

Our compare page shows which services stated a BAA on their pricing pages when we checked. For faxes that carry no PHI, see online fax for medical offices.