Is MyFax HIPAA compliant?
Not as sold. MyFax's own terms forbid storing patient information unless you have already executed a business associate agreement with them, and its own FAQ sends anyone wanting HIPAA-compliant faxing to a different product — eFax Corporate.
Applies to MyFax online fax (Consensus Cloud Solutions). Last reviewed against MyFax's own documentation. Next review November 11, 2026.
Reviewed by Carlos Mendez — IT Security Manager, regional healthcare network.
If you keep using it anyway
- Do not put patient information through MyFax on the strength of its security page. The terms make an executed agreement a precondition, not a formality you can regularise later.
- If you believe you have an agreement with Consensus covering MyFax specifically, get a copy naming MyFax as the service and keep it — coverage under a sibling brand does not carry across.
- Otherwise move to a product the vendor actually positions for this, and port the fax number rather than leaving it forwarding into an uncovered account.
Does MyFax sign a business associate agreement?
MyFax does not offer one. MyFax publishes no route to obtain one. Its terms contemplate an executed agreement as a precondition for storing patient information, but no MyFax page offers, prices or explains how to request it, and the FAQ answers the HIPAA question by recommending eFax Corporate instead. Treat the absence of a published path as the answer, and ask Consensus in writing if you need it on the record.
What the agreement does not cover
- The MyFax service generally, absent an executed agreement — its terms prohibit storing protected health information until one exists.
- Anything already sitting in the MyFax account's stored fax history from before you noticed.
- Email delivery of received faxes to an ordinary mailbox, which is a second uncovered service downstream of the first.
Use instead
Listed on merit. We take no payment for placement and use no affiliate links.
Sold to healthcare directly, with the agreement offered as part of the signup rather than as an exception
The sibling Consensus brand MyFax's own FAQ points to — but confirm the exact SKU, as eFax's own pages disagree on which plans carry it
Signs for accounts on its business tier, with the agreement described up front
You just found one. What else is in your stack?
If MyFax was a surprise, it is rarely the only one. Most small organizations are running fifteen to thirty tools and have written agreements with a handful of them. A vendor register tracks which of yours touch patient information, which have a signed agreement, when each expires and who owns it — and exports as part of the evidence pack when a client asks.
$79/month, 14-day free trial, no credit card. The checker itself stays free and needs no account.
Sources
Every statement above comes from MyFax’s own published documentation, read on the date shown.
- Terms & Conditions — MyFax (Consensus Cloud Solutions Canada ULC). Published October 7, 2021. Read August 13, 2026.
- MyFax FAQ — Is MyFax a secure faxing solution? — MyFax. No publication date given. Read August 13, 2026.
Change history
- — First published.
This page is information, not certification and not legal advice. It reflects MyFax’s published documentation as read on August 13, 2026; vendors change their terms without notice, so confirm anything you rely on directly with the vendor. Whether your own use is compliant depends on your configuration, your executed agreement and how your staff actually work. No company can be “HIPAA certified” — no such designation exists.
Think something here is wrong or out of date? Tell us at support@hipaacompliancesoftware.org — corrections are published with a dated note in the change history above, never silently. See our editorial standards for how entries are researched and re-verified.