Is Dropbox Fax HIPAA compliant?

Dropbox Fax can carry patient information only after you and Dropbox separately sign a Business Associate Agreement (BAA), and none of the ten plans on its pricing pages, from Free to $749.99 a month, names one. Dropbox's own terms bar protected health information (PHI) without that agreement. Fax Pigeon sells HIPAA fax, so read this as a seller's comparison. Every Fax Pigeon plan includes a signed BAA, executed at signup.

What do Dropbox's terms say about patient information?

Dropbox Fax's sign-up box says "you agree to the Dropbox Sign Terms & Privacy Policy." Those terms, posted January 7, 2025, cover the "Dropbox Fax websites and services." Section 4.2 lists what a customer must not do. Item xii bars storing, transmitting or processing PHI through the services "unless Customer and Dropbox separately enter into a HIPAA Business Associate Agreement."

Separately means a second agreement, outside the terms, that both sides enter into. Item xii names no plan and carves out no free tier, so it reaches the Free plan as much as Ruby.

HIPAA asks the practice for the same document. A covered entity may let a business associate handle PHI "if the covered entity obtains satisfactory assurance," and the assurance must be documented through "a written contract or other written agreement" (45 CFR 164.502(e)). HHS lists a cloud service provider that stores electronic PHI among business associates and limits the conduit exception to transmission services with at most temporary storage (HHS). Dropbox Fax lists "Secure Cloud Storage" as a plan feature.

Does Dropbox publish a BAA for any Dropbox Fax plan?

No. The three pricing pages list ten plans, and no plan card, feature row or FAQ answer names a BAA. A row of compliance badge graphics in the footer includes one for HIPAA. Dropbox's own HIPAA article says "There is no official HIPAA/HITECH certification." A badge is a graphic, and a BAA is a signed contract.

At 500 pages a month, Dropbox's Professional plan is $19.99 ($199.99 billed yearly). Fax Pigeon's Standard plan is $11.99, or $9.99 a month billed annually, with the BAA signed at signup. At 1,000 pages, Dropbox's Small Business plan is $39.99 ($399.99 billed yearly) and Fax Pigeon's Plus plan is $17.99, or $16.99 billed annually. Past the limit Dropbox bills 5¢ for each page sent or received; Fax Pigeon bills 5¢ on Standard and 4¢ on Plus.

The Free plan sends only: Dropbox's FAQ says "Receiving faxes is available for paid accounts." The same FAQ says porting a number in needs a Professional or Small Business plan, and that a one-time fee may apply. Fax Pigeon ports a number in free on every paid plan, and every plan has unlimited people at no extra cost.

Does Dropbox's HIPAA help article cover Dropbox Fax?

It does not name Dropbox Fax. Dropbox and HIPAA/HITECH (updated September 16, 2025) says: "The information in this article applies to certain teams on Dropbox Standard, Dropbox Advanced, Dropbox Enterprise, Dropbox Education, Dropbox Business, Dropbox Business Plus, and Dropbox Sign." It adds that an admin of a Dropbox team account can "sign a BAA electronically from the Account page in the admin console." The word fax does not appear in it.

Is Dropbox Sign HIPAA compliant? (updated August 12, 2026) covers the e-signature product: an annual Standard or Premium plan, a signed BAA and the "minimum contract value." It does not mention Dropbox Fax either. Dropbox's fax page calls Dropbox Fax "part of the Dropbox Sign product family," and neither article describes a BAA for it.

What would make Dropbox Fax compliant for a practice?

A signed BAA that covers Dropbox Fax, in hand before the first fax that carries patient information. Dropbox publishes none for any Fax plan, so the first step is a written question to Dropbox: which Dropbox Fax plan will it sign a BAA on, and when does the signed copy arrive? Until the copy arrives, item xii leaves patient faxes outside Dropbox's terms.

Who should switch from Dropbox Fax?

A practice that has sent patient records through Dropbox Fax without a BAA in hand should move to a service that signs one at signup. Every Fax Pigeon plan includes the signed BAA. Basic is $5.99 a month ($4.99 billed annually) for 200 pages, Standard is $11.99 ($9.99) for 500 and Plus is $17.99 ($16.99) for 1,000. Every plan includes your own dedicated fax number and free number porting. The pricing page lists all six plans.

Move the number in this order. Start the port at Fax Pigeon from Settings while the Dropbox account is open. Dropbox's service terms let you port a number out by following the new provider's instructions, and say numbers not ported before cancellation "may be released." The port costs nothing on a paid plan, Dropbox keeps serving the number until it lands, usually within 5 to 15 business days, and the full porting walkthrough has the order of operations.

* Prices last verified October 7, 2026, at each provider's own site. Fax Pigeon is not affiliated with Dropbox.