Knowledgebase: PamFax General
Is PamFax HIPAA compliant?
Posted by Richard S, Last modified by Richard S on 09.02.2012 - 11:34
PamFax is HIPAA compliant, according to the following HIPAA requirements for a software solution:

Requirement: Is always encrypted as it is transmitted over the Internet
PASS: PamFax only uses encrypted connections via TCP/IP. As such none of the data is transferred in bits and not as a complete document.
 
Requirement: Is not lost, i.e. should be backed up and can be recovered
PASS: PamFax saves your sent faxes for 30 days, if you have a Pro Plan the history is saved indefinitely.

Requirement: Is only accessible by authorized personnel
PASS: Only a small part of our staff have access to fax data. These people are contractually bound to keeping data security rules.

Requirement: Is not tampered with or altered
PASS: Servers are managed by selected staff. No external access is possible.

Requirement: Should be encrypted if it is being stored or archived
PASS: Data is stored on secure servers.

Requirement: Can be permanently disposed of when no longer needed
PASS: You can delete your fax history items manually.

How does a conventional email to fax service stack up to these requirements?

Requirement: Is always encrypted as it is transmitted over the Internet
FAIL: Data is not encrypted during transmission.

Requirement: Is not lost, i.e. should be backed up and can be recovered
MAYBE: Depends how often you do backups.

Requirement: Is only accessible by authorized personnel
MAYBE: Depends on how securely you have setup your computer.

Requirement: Is not tampered with or altered
FAIL: No way to be sure that data is not tampered with or to tell if it has been as its been sent via the internet without encryption.

Requirement: Should be encrypted if it is being stored or archived
FAIL: Data is never encrypted locally in your email software. Is stored on many IPS hosts as a not encrypted full document.

Requirement: Can be permanently disposed of when no longer needed
FAIL: Deleting an email still leaves the sent data sitting on many ISP servers.

As you can see, PamFax is a secure solution compared to an email to fax solution.
(14 vote(s))
Helpful
Not helpful