Fax.Plus says HIPAA compliance with a BAA is available only on its Enterprise plan, requested by an owner or admin in account settings. So the answer depends on your plan. Check yours below before any patient data goes in.
| Plan or product | BAA |
|---|---|
| All plans other than Enterprise | Not covered |
| Enterprise, billed monthly or yearly | Covered |
What the BAA leaves out
- Zapier, which is disabled when HIPAA is enabled
How to get the BAA
An owner or admin opens Settings, Security, activates Advanced Security Control, then selects Request beside the HIPAA Business Associate Agreement; a representative sends it for signature.
What the vendor says to do
- Buy an Enterprise plan and add or port a fax number
- Choose the data center location in the compliance tab
- Activate Advanced Security Controls
- Request and sign the BAA
- Use the @tls.fax.plus address for email-to-fax
- Decide whether an admin should allow fax attachments in email, sent only over TLS 1.2 connections
Proof from the vendor
- HIPAA Compliant FaxEnterprise only, setup steps, email-to-fax and Zapier limits
- Plans and PricingBAA available on Enterprise only
- Does Alohi Suite sign Business Associate Agreement (BAA) with users?Who can request, steps, notification limits after signing
This isn’t legal advice. A BAA is one requirement. Your clinic still has to set the tool up correctly and control who has access. Vendors change their terms, so confirm with the vendor before you sign. PHI means protected health information, which includes patient data.