Security

How JamFax protects your faxes

What we do to keep your account and your documents private, and what you control.

Last reviewed October 25, 2026.

Your account

  • JamFax is only served over HTTPS, and browsers are told never to connect without it.
  • You can turn on two-step sign-in with an authenticator app or a security key under Settings, Security.
  • On Corporate Fax, each person sees only their own department's faxes and fax numbers.

Your documents

  • Sent and received faxes are stored privately and opened only through short-lived links.
  • You choose how long faxes are kept under Fax lines, Keep faxes for. Faxes older than that, and their documents, are deleted every night.
  • Like any fax, the document travels over the phone network between JamFax and the receiving fax machine.

Faxing by email

  • We only fax email from the address you sign in with, and we check that the email really came from that address before sending anything.
  • Only PDF and TIFF attachments are faxed, and sending by email is limited to 30 faxes an hour.

Payments

Card payments are taken by Stripe. JamFax never sees or stores your full card number.

Health information (HIPAA)

JamFax does not currently offer a Business Associate Agreement (BAA) and does not claim HIPAA compliance. Do not fax protected health information (PHI) with JamFax. HIPAA and JamFax explains what that means and who should choose a service that signs a BAA.