# SingleFax HIPAA Compliance

HTML: https://singlefax.com/hipaa-compliance

Covered Entities and Business Associates use the HIPAA compliant fax service (HIPAA Secure Mode) on the SingleFax website with an electronic BAA. Product and prices: https://singlefax.com/hipaa-fax.md

Encryption, audit trail, and secure deletion apply on that path. Inbound OCR/transcripts on HIPAA numbers stay in the Secure dashboard after a covering BAA. They are never emailed.

MCP (`https://singlefax.com/mcp`), MPP (`POST /api/v1/machine/faxes`), and the public REST API are **not** HIPAA surfaces. Do not send PHI there.

Contact: info@singlefax.com

## Personal records and optional Enhanced Privacy

Individuals sending their own health records, or acting as an authorized personal representative, may use standard send without a HIPAA BAA. Enhanced Privacy is an optional paid upgrade: $6.50 for 1–10 billable pages or $10 for 11–100, plus any destination adjustment shown in the quote. It uses shorter document retention, privacy-safe notifications, and securely stored transmission receipts. A personal upgrade does not execute a BAA, make you a HIPAA covered entity, or bind the receiving clinic.

If you send patient information on behalf of a HIPAA covered provider or business associate, including as a sole proprietor, you must choose HIPAA Secure and have an authorized signer accept the BAA before uploading. The role you act in determines this requirement, not your account label or an automated document classification. Personal Enhanced Privacy does not substitute for the healthcare BAA.

Neither option promises end-to-end encrypted fax transmission, delivery to the intended person, or control of the recipient’s handling of the fax. Verify the destination and your authority to send the document. Standard uploads also have transport and storage safeguards; the upgrade is not a claim that standard sending is unencrypted.

For standard website uploads, we may extract text and use automated classification to show an advisory reminder that a document may contain health information. The check can miss or misclassify documents. It does not determine your legal role, automatically enable a premium option, change your price, or certify compliance. The hint stores a classification result rather than a retained OCR transcript. Secure sends skip this advisory classification. Any processing completed before you choose an upgrade remains subject to the policy that applied at that time; a later BAA does not retroactively cover earlier processing.