How we look after your faxes
Faxes often carry contracts, IDs and account details. Here is what we do to protect them, and what fax can and can't promise.
Not for patient health information. Faxpresso isn't HIPAA compliant today: we don't sign Business Associate Agreements. Please don't use it to send or receive protected health information (PHI). We plan to offer a HIPAA option later.
What we do
- Encrypted connections. The website, the apps and the emails we send all use encrypted connections (HTTPS and TLS).
- Your faxes are yours. Every fax is tied to your account, not to the phone number. If a number ever passes to someone else, your old faxes never go with it.
- No passwords. You sign in with Google, Microsoft, Apple, a passkey, or a one-time code sent to your email or phone, so there's no Faxpresso password to steal, reuse or guess. Codes expire in minutes, wrong guesses are limited, and we email you when a new device or passkey is added.
- Kept in the US. Your faxes and account data are stored on servers in the United States.
- Limited staff access. Our team only looks at an account when you ask for help, or to stop abuse. Every staff action is logged.
- Card details stay with Square. Payments are handled by Square. Your full card number never touches our servers.
- You decide how long we keep faxes. We keep faxes for a year. You can delete any fax at any time, and download everything if you leave.
What fax can and can't do
Faxpresso protects your faxes inside our service. Between our service and the other fax machine, a fax travels over the regular phone network, the same way any fax does. That part isn't encrypted by anyone, which is true of every fax service. If you need encryption from end to end, a secure email or file-sharing service is a better fit than fax.
Report a problem
If you think you've found a security problem, please email [email protected] with "Security" in the subject. We'll reply quickly.