HIPAA compliant fax for physical therapy clinics

A physical therapy clinic needs a fax service that signs a Business Associate Agreement (BAA) on the plan it buys, receives referrals on a number the clinic owns, and proves each delivery. Fax Pigeon does all three from $4.99 a month billed annually for 200 pages. Medicare's 2025 exception to the signature rule asks for evidence that a plan of care reached the physician within 30 calendar days, and a delivery certificate records the date it arrived.

Why does a physical therapy clinic still fax?

Four streams of paper keep a clinic on the line, and Medicare's rules shape the first.

Referrals and plans of care. The physician or non-physician practitioner (NPP) certifies the initial plan of care with a dated signature or a verbal order within 30 calendar days of the first treatment day, and signs a verbal order within 14 calendar days. Recertification follows at least every 90 calendar days, and progress reports at least once every 10 treatment days (CMS fact sheet MLN905365). Since January 1, 2025, a signed and dated order or referral in the record can stand in for the signature on the initial plan of care when the physician has not returned a signed copy within 30 calendar days of the evaluation. The record then needs evidence that the plan reached the physician in that window (APTA).

Insurer authorizations. APTA's 2025 administrative burden survey puts numbers on the wait: 80% of respondents wait an average of three days or more for a prior authorization decision, 30% of physical therapists wait one to two weeks, and 3 out of 4 practices have hired administrative staff solely to manage payer requirements (APTA).

Workers' compensation. Washington's Department of Labor and Industries needs no authorization for a worker's first 12 physical therapy visits and has the clinic fax a request form for visits 13 through 24 (L&I). It also wants a progress report sent to the attending provider and the insurer after 12 visits or one month, whichever comes first.

Records requests. CMS's CERT program samples Medicare claims to measure improper payments, and it requests the records behind a sampled claim by fax, letter or phone call (MLN905365, above). The wider case for the channel is in Why do doctors still use fax?

What proof does Medicare want that a plan of care was delivered?

CMS says the exception holds when the record includes the written order or referral, plus further evidence that the plan of care was delivered to the physician or NPP within 30 calendar days of the therapist's initial evaluation. The order has to carry the physician's dated signature, identify the physician and the patient, and name the type of therapy. The exception does not reach recertifications, which still need a signature.

A delivery certificate for every delivered fax records the date and time the plan arrived, which is the fact the 30-day window turns on. It shows whether the plan went out on the day of the evaluation or on day 29. File it beside the order.

What does a physical therapy clinic need in a fax service?

A signed BAA on the plan you buy. Referral and plan-of-care traffic is treatment traffic, and HIPAA permits a disclosure for another provider's treatment activities (45 CFR 164.506(c)(2)). The fax service in the middle is the clinic's vendor. A covered entity may let a vendor handle its electronic protected health information only after obtaining satisfactory assurances, documented in a written contract (45 CFR 164.308(b) and 164.502(e)). Some fax services put a HIPAA badge on their cheapest plan and sign the BAA only on a higher one, and the BAA price comparison goes plan by plan. Every Fax Pigeon plan includes a signed BAA, executed at signup.

Your own number. Referring offices, payers and workers' compensation insurers answer to the number on the clinic's forms. Every paid plan gives the clinic its own number to send from and receive on, and the clinic's current number can move in at no cost. It stays live at the old provider until the transfer lands, which for most transfers is 5 to 15 business days.

An inbox the whole clinic works. Therapists, front desk and billing share one number and one inbox, with unlimited people at no extra cost. Roles and assignment send a referral to the evaluating therapist and an authorization letter to billing. Every inbound fax arrives as a PDF with an AI summary.

Proof of delivery. Every delivered fax gets a delivery certificate, the dated record described above.

What does HIPAA fax cost for a physical therapy clinic?

Pages sent and received count together against one monthly total, and faxes keep arriving past it. Add up last month's pages on your current line and match the sum to a plan.

Take a clinic that starts 30 new patients in a month and faxes each plan of care as 6 pages: 180 pages. Add 40 progress reports of 2 pages and 60 inbound referrals and payer letters of 3 pages, and the month is 440 pages. Standard is the plan for that clinic, because it costs less than Basic plus 240 extra pages at 10¢.

On annual billing, Basic is the cheapest plan up to about 250 pages in a month, Standard up to about 640, Plus up to about 1,325 and Pro up to about 2,570. Extra pages are charged at the table's rate on a separate invoice, monthly plans at renewal and annual plans every 30 days, so a heavy month adds a charge and faxes keep arriving. Premium (5,000 pages) and Max (10,000) are on the pricing page.

The plans differ only in pages and the extra-page rate. Every plan has a signed BAA, a delivery certificate for every delivered fax and a shared inbox with roles and assignment. It works in any web browser, on a computer or a phone.

Who should switch

Switch if plans of care and authorization requests still go out from a machine and the clinic wants them in a shared browser inbox, or if its fax service signs the BAA only on a plan above the one you pay for. Port the number before the old line closes; leaving a provider without losing the number has the order.

* Fax Pigeon prices and plan terms as of October 8, 2026.