HIPAA-Compliant Fax for Medical Practices
Referrals, lab results, prior authorizations, patient records — sent securely, logged for audit, covered by a BAA you sign in-app. $25/mo flat.
The fax is not optional. The compliance is not either.
Insurers and labs still demand fax. Your EHR does not replace it — it just makes the fax the last manual step in your day.
A referral goes out, a prior authorization comes back, a lab result arrives from a facility that has no interface with your EHR. According to the CAQH 2023 Index, 37% of medical prior authorizations were still fully manual — phone, mail or fax — and another 32% only partially electronic through payer portals or IVR. The fax is not a legacy habit; it is the fallback whenever the electronic path does not exist between two specific organizations.
Medical Practices: where the obligation comes from.
CMS finalized its claims attachments rule on March 24, 2026: effective May 26, 2026, with mandatory compliance by May 26, 2028. It standardizes the documentation that supports claims — but the final rule does not cover prior authorization attachments, which HHS deferred. The manual prior-auth workflow your staff runs today is not going away on that date.
Most fax providers advertise a low headline price and then gate the Business Associate Agreement behind a more expensive plan. Sign up on the cheap tier, send PHI, and you are out of compliance from the first page. LuzardoFax includes the signed BAA on every paid plan, starting at $25/mo, and never bills you automatically for extra pages.
We publish every provider's real price with a signed BAA, verified against their own legal terms, on our comparison page.
Questions worth asking.
Not for prior authorization. The final claims attachments rule adopted in March 2026 covers claims and equivalent encounter attachments only; HHS removed prior authorization attachments from the final version and said it would keep evaluating alternatives. Claims documentation moves to an electronic standard by May 2028. Prior authorization does not.
If you transmit protected health information, yes — and that requires a signed Business Associate Agreement with your fax provider. A service that markets itself as "secure" but will not sign a BAA does not make you compliant. Many providers only sign a BAA on their most expensive plan; LuzardoFax includes it on every paid plan at $25/mo.
$25/mo for the Solo plan, including 350 pages, a signed BAA, and a fax number of your choosing. There is no separate HIPAA tier and no automatic overage billing — at 110% of your allowance, sending and receiving pause until you add a page bundle or upgrade, rather than arriving as a surprise invoice. Larger plans: Plus at $45 (800 pages), Team at $75 (1,500), Business at $129 (4,000). By comparison, eFax requires its Business plan at $39.99 for a signed BAA.
Try it before you decide.
14 days free. No credit card. The BAA is signed in-app before you send a single page — and it stays included at every plan, forever.