Fax security depends on the whole route: your device, the online service or fax machine, the transmission network, and the recipient’s machine or inbox. No single label such as “encrypted fax” establishes that every part is protected.
| Stage | What to check |
|---|---|
| Preparing the document | Include only the intended pages and check for hidden or extra information. |
| Uploading to an online service | Check for HTTPS, account access controls, storage practices, and a clear retention policy. |
| Provider and phone transmission | Ask which parts of the route use encryption. HTTPS on the website does not make the entire fax path end-to-end encrypted. |
| Receiving | Confirm the destination number and who can access the recipient’s machine, email, or online inbox. |
| After sending | Check the final delivery status. It does not prove that the intended person read the fax. |
A traditional fax machine typically sends over a telephone connection without end-to-end encryption. Its paper output can also be left in a shared tray. Online fax avoids local paper at the sender, but introduces a provider that processes the document. Compare the actual safeguards for the route you will use rather than assuming either method is universally safer.
Onetime Fax lets you upload a document, send it to a supported destination, and check the resulting fax status. A completed payment or an attempted transmission is not a delivery result. Uploaded outbound documents are scheduled for deletion 24 hours after delivery; see the privacy policy for the complete retention terms. If you need a faxed reply, a receive number has its own inbox and pricing.
We do not describe the whole fax path as end-to-end encrypted or claim that a delivery status proves the recipient read the document.
The U.S. Department of Health and Human Services says fax can be used to disclose patient information for treatment when reasonable safeguards are in place, including verifying the destination number and securing the receiving machine. HHS also says a covered entity or business associate using a cloud service to handle electronic PHI must have an appropriate business associate agreement and meet the applicable HIPAA requirements. Do not assume that choosing any online fax service by itself satisfies those requirements. Confirm the provider’s controls and agreement before sending regulated information.
For a direct comparison with email, see Fax vs Email Security. If fax is the right method for your document, start a one-time send.
Do not assume so. A service may use HTTPS for your upload while the onward fax travels through a provider and telephone network. Ask the provider which parts of the route are encrypted.
No. A delivered status reports the transmission outcome, not who picked up or read the document. Confirm the recipient's number and process when receipt matters.
That depends on its safeguards and provider agreements. HHS says covered entities using a cloud provider to handle electronic PHI generally need an appropriate business associate agreement. Confirm requirements before use.
Verify the destination number, send only the necessary pages, check access to the receiving machine or inbox, and keep the final status for your records.