HIPAA Compliance

Ensuring that your faxes meet HIPAA compliance standards is important, and we can help you with these easy steps:

What you need to do

Follow these steps to make your account HIPAA compliant:

1. Head over to the Dashboard and configure the settings of your service and uncheck both boxes in the "HIPAA" section.

   This will prevent storage of any of your transmitted documents on our servers.

   From the HIPAA section of your dashboard, you can also sign a BAA Agreement via DocuSign.

2. Enable Two-Factor Authentication in your User Profile .
3. Use HTTPS for all webhook URLs you provide to us.

What we already do for you

Here's what we do to ensure that your protected health information (PHI) documents are secure:

• Our secure API URL ( https://faxi.api.sinch.com ) enforces TLS 1.2.
• Your faxes are not stored (when the boxes in Fax > Services > HIPAA are unchecked). This means that no one can view, alter, delete, or otherwise tamper with your files.
• Callbacks are logged so that you receive confirmation containing the date and time a fax was sent or received.