Is mFax HIPAA compliant?

Yes, once your practice has a signed business associate agreement (BAA) with Documo, the written agreement that 45 CFR 164.502(e)(2) requires. Documo, the 2025 name for mFax, says every healthcare account gets one, and its Solo plan starts at $25 a month billed annually for 300 pages. Fax Pigeon sells HIPAA fax.

What happened to mFax?

mFax is now Documo. Documo's mFax page dates the mFax launch to 2017 and the single brand to 2025, when mFax, mSign and mDrive came together under the Documo name. It says the team and the platform are the same. The old mfax.io address redirects to documo.com, and mfax.io/pricing opens Documo's pricing page. The page's security summary lists HIPAA, SOC 2 and PIPEDA, the Canadian privacy law, and says a BAA is included.

A different company's fax service also trades as mFax, and this page covers only the platform that became Documo.

Does Documo sign a BAA, and on which plans?

Yes, on every plan. Documo's pricing page heads its plan cards with "HIPAA compliance comes standard with every plan." Its side-by-side table marks the HIPAA and BAA row Included for Solo, Business and Enterprise, and its FAQ confirms that healthcare customers get a signed BAA. Its Cloud Fax page says every plan includes one.

The security page adds the terms. Every healthcare account gets a signed BAA at any plan and spend, one standard agreement covers all Documo products, and Documo countersigns it at no extra cost. Enterprise accounts can ask for custom language.

How do Documo's plans compare with Fax Pigeon's?

Documo lists Solo, Business and Enterprise and quotes a fourth tier, Custom Platform, by request. Each Fax Pigeon row below is the cheapest way to cover the same pages.

Each Documo user past the plan's count costs $3.00 more, while every Fax Pigeon plan includes unlimited people and a signed BAA executed at signup. Extra pages cost 15¢, 9¢ and 7¢ on the three Documo plans, against 5¢, 3.5¢ and 3¢ on the matching Fax Pigeon plans listed on the pricing page. Documo's FAQ prints Enterprise at $250 a month, a figure no plan card shows, so the table uses the card prices. Fax Pigeon vs Documo covers how Documo counts pages and who owns its fax numbers.

Can you read Documo's BAA before you buy?

Yes. Documo's BAA page embeds its standard agreement as a ten-page PDF and links a download. The PDF is a template with blanks for the practice's details and signature, plus a signature block for Documo. It prints no version number or effective date, and it points to Documo's end-user license agreement for subscription terms, service levels, payment terms and data ownership.

What is in Documo's BAA?

Documo may use the protected health information (PHI) it receives to manage and administer its own business, with marketing support excluded, to provide the practice with data aggregation services, and to report violations of law to federal and state authorities. The agreement starts on the date the practice signs and ends when the information is returned or destroyed. Its definition of ownership of data says Documo keeps the customer's data containing electronic PHI for a reasonable period so the customer can validate it, and the text gives no number of days.

Documo may amend the BAA on its own, including for other business reasons, and an amended agreement it signs on a later date supersedes the earlier one. Disputes go to compulsory arbitration under the American Arbitration Association's commercial rules, except for injunctive relief. Each party indemnifies the other for losses from unauthorized use or disclosure of PHI, and each bears its own legal costs.

Does the BAA cover Documo's free trial?

The BAA names no trial. It begins on the date the practice signs and stays in effect while the practice has subscribed to and is using Documo's services. Documo's pricing page lists a 14-day free trial that needs no credit card, and its subscription agreement says the BAA applies, and is incorporated into the agreement, to the extent customer data includes PHI.

The rule behind the question is 45 CFR 164.502(e), which calls for satisfactory assurance from the business associate, documented in a written contract. Do you need a BAA with your online fax service? lists the terms 164.504(e)(2) requires. Fax Pigeon's free first fax, up to 10 pages with no credit card, goes out under the same signed BAA as the paid plans.

Is Documo HITRUST certified?

Documo's pages say both that it has attained HITRUST e1 and that it is pursuing it. The opening of its security page calls the certification attained, and a FAQ lower on the same page says Documo is actively pursuing e1. Its Cloud Fax page lists e1 as certified in one place and in progress in two. The security page also says qualified prospects and customers can read its SOC 2 Type II report under an NDA. A certificate and an audit report are different documents from the written agreement 45 CFR 164.502(e)(2) describes.

Who should switch from mFax?

A Solo account with a second person in the office should switch: its second user costs $3.00 more, and every Fax Pigeon plan includes unlimited people. A Business account pays $80 billed annually for 1,500 pages against $29.99 for Pro at 2,000 pages, and an Enterprise account pays $240 for 6,000 pages against $79.99 for Premium with 1,000 extra pages.

A practice with its number in payer files can start a free port from Settings while the Documo account is open, and the port-before-cancel steps give the order.

* Prices last verified October 11, 2026, at each provider's own site. Fax Pigeon is not affiliated with Documo, formerly mFax.