Is eFax HIPAA compliant?
It depends on the plan. eFax lists a signed Business Associate Agreement with its Business plan at $39.99/mo, which includes 500 pages, 5 user licenses and $0.07/page overage. Their Personal plan at $18.99 is marketed as HIPAA compliant but does not list a BAA among its included features — and without a signed BAA, a service should not carry PHI on your behalf.
The plan is what matters
eFax markets encryption across its lineup, but encryption alone is not the deciding factor. The question for a covered entity is whether the provider will sign a BAA for your account. On eFax's official pricing page, the signed Business Associate Agreement appears as an included feature of the Business plan.
What eFax Business includes
At $39.99 per month, verified against their official pricing page:
- 500 pages per month
- $0.07 per page above the allowance
- 5 user licenses, with additional users at $10/mo each
- 1 fax number, with additional lines at $5/mo each
- HIPAA compliance and a signed Business Associate Agreement
Points worth knowing
Three things that come up often when practices evaluate eFax:
- The advertised price is not the compliance price. The $18.99 Personal plan is the number most people see first; the plan that lists a BAA is $39.99.
- Included user licenses are a real advantage. Five individual logins at that price is a complete package for a small office, and unique user identification is something the Security Rule expects when several people handle PHI.
- eFax, MyFax and MetroFax share a parent company. Moving between those brands changes the brand, not the provider.
How it compares
Against the other services we track: SRFax lists lower healthcare pricing at comparable volumes; Fax.Plus places its BAA on a $79.99 Enterprise tier that includes audited certifications; Documo offers native EHR integrations. LuzardoFax includes a signed BAA on every paid plan from $25/mo with no automatic per-page overage billing, though individual user logins are included on the Business plan rather than lower tiers.
And the part no provider can answer for you
Choosing eFax Business, or any provider with a BAA, does not by itself make a practice compliant. HHS requires each organization to conduct its own risk analysis and implement administrative, physical and technical safeguards. The vendor is one component.
Primary sources.
We link to the original rule and guidance so you can verify anything here yourself.
This content is provided for general informational and educational purposes only and does not constitute legal, regulatory, compliance, or professional advice. HIPAA compliance depends on the specific facts, systems, policies, and practices of each organization. Organizations should consult qualified legal or compliance professionals regarding their specific obligations.
Last reviewed: 2026-07-19. Product features, pricing, and compliance offerings may change. Verify current terms directly with each provider before making a compliance or purchasing decision.
Questions worth asking.
Yes, on the Business plan. eFax's official pricing lists a signed Business Associate Agreement as an included feature of Business at $39.99/mo. Their Personal plan does not list a BAA among its features.
The Personal plan is marketed as HIPAA compliant but does not list a signed BAA among its included features. Without a BAA in place, a service handling PHI on your behalf does not meet the business associate requirement. Confirm directly with eFax before using any plan for PHI.
$39.99 per month for the Business plan, which includes 500 pages, 5 user licenses and a signed BAA, with $0.07 per page above the allowance.
They share the same parent company. Switching between those brands changes the brand rather than the underlying provider.
Try it before you decide.
14 days free. No credit card. The BAA is signed in-app before you send a single page — and it stays included at every plan, forever.