Skip to Content

vFAX: Cloud Faxing That Actually Works for Regulated Industries

Fax isn't dead in healthcare, legal, and finance. vFAX replaces the POTS line and the desktop fax box with a real cloud service.
November 15, 2023 by
vFAX: Cloud Faxing That Actually Works for Regulated Industries
Earl Rusnak

Fax did not die. It just stopped being a machine in the corner.

If you work in healthcare, law, or parts of financial services, you still send and receive faxes every week. Hospital referrals, signed engagement letters, loan docs, prescription confirmations, court filings, insurance verifications. The forms are still faxed because the receiving side requires it, and because fax has a documented audit trail that email does not. That is not going to change in the next budget cycle.

VoIP International runs vFAX as a cloud fax product from our Ocoee, Florida headquarters. We operate it ourselves, we support it ourselves, and we sell it to customers across the country. Below is a straight read on who still needs it, how it works, what it costs, and how we handle security.

Who actually still needs fax

Three groups send us most of the vFAX orders we write:

  • Healthcare practices. Referrals, prior authorizations, lab orders, and patient record requests still move by fax because covered entities treat fax as part of their HIPAA-compliant document workflow. A medical office that drops fax usually ends up reinstating it within 60 days.
  • Law firms. Signed instruments, opposing-counsel exchanges, and court documents in jurisdictions that still accept fax filings. Many smaller and rural courts have not moved everything to e-filing.
  • Finance, lending, and insurance. Loan packages, signed disclosures, and claims documentation. Many older underwriting systems are still wired to fax intake.

If that is your business, you do not need to be sold on fax. You need a way to keep it without paying for a POTS line, maintaining a physical fax machine, and chasing toner.

Why fax is sticky in these industries

Fax persists because it solves a specific problem better than email: it gives both sides a documented, timestamped record of a sealed document delivery, on a regulated transport, against a known endpoint. The phone number is the address, the timestamp is the proof of receipt, the contents are not searchable by an inbox-scanning AI on a free email account. In a regulated environment where discovery, audit, and chain-of-custody matter, those properties have value.

The legal definition of "reasonable safeguards" in HIPAA includes choices like fax for exactly those reasons. Email between covered entities is fine if both ends are configured for it. Fax doesn't require both ends to be configured for it — it just works. That's why hospital intake still uses fax for referrals: they can't guarantee every referring physician runs encrypted email.

The compliance argument for fax

HIPAA, the Gramm-Leach-Bliley Act for financial services, attorney-client privilege rules for legal — each has its own definition of what qualifies as a secure transmission. Fax fits squarely inside each of those frameworks when properly configured. Email is more contested. Postal mail is slower and less reliable. The combination of audit-grade transmission records, point-to-point routing, and a regulatory pedigree dating to the 1980s is why fax persists in regulated industries even as everything else moves to APIs.

How vFAX works

vFAX is fax over the internet. You keep your existing fax number or get a new one from us, and the service does the rest.

  • Send a fax by emailing it as an attachment to a vFAX address, or by uploading through the web portal. PDF and most common document formats are supported.
  • Receive a fax as a PDF attachment in your email inbox, or pull it from the portal. Multiple users can receive on the same number.
  • Port your existing fax number so vendors and referring offices do not have to update anything on their end. Porting is $15 per number.
  • No fax machine, no fax line. If your fax line is the last analog line in the office, vFAX is what lets you cancel it.
  • Optional adapter if you have a fax machine you want to keep — plug the existing machine into our service and it works exactly like it did before, but the line going out is internet, not copper.

If you also need desk phones, the same account can sit alongside our phone service on one bill and one support team. That is usually how customers come to us, then they add vFAX once they realize the analog fax line is still on the legacy bill.

Plans and pricing

Four tiers, priced for how much fax volume you actually send:

  • vFAX Standard - $25/month. Light volume. Good for a solo practice or a small office that faxes a few times a week.
  • vFAX Power - $35/month. Mid-volume. Fits most small to mid-size healthcare and legal offices.
  • vFAX Power Plus - $49/month. Heavier volume. Multi-provider practices, busy referral coordinators, lending shops.
  • vFAX Enterprise - custom. High-volume, multi-location, or integration work. We quote it.

Each tier includes a per-page allowance and a per-page rate over that allowance. We will tell you on the call which plan matches what you actually send, instead of selling you the biggest one. Full plan details are on the vFAX page, and our phone, fax, and trunking pricing lives together on the pricing page.

Real-cost comparison: vFAX vs keeping the machine

An average small practice keeping a fax machine pays roughly:

  • POTS line at $50/month = $600/year
  • Toner, paper, maintenance = $400 to $600/year
  • Staff time scanning inbound faxes into the EHR or document system: 4 to 8 hours/week, $4,000 to $8,000/year at $20/hour
  • Total: $5,000 to $9,200/year

The same practice on vFAX Power at $420/year, with the API or email integration handling inbound routing, eliminates most of the staff scanning time. Net savings: typically $4,000 to $8,000/year for a small practice. For a multi-provider clinic, the savings scale up.

Security and HIPAA

For healthcare customers, vFAX is set up to fit a HIPAA-aligned document workflow. Faxes are transmitted over encrypted connections, stored encrypted, and accessible only by the users you authorize. We sign a Business Associate Agreement when one is required.

For legal and financial customers, the same encryption and access controls apply. You get an audit trail of what was sent, when, to which number, and whether it was delivered, which is what your compliance team is going to ask for the first time a document is disputed.

None of this is unusual for a cloud fax product. What is unusual is having the operator who runs it answer the phone when something is wrong with a port or a confirmation. That part is on us.

Specific compliance features

  • BAA signed at no extra charge for healthcare accounts.
  • TLS encryption on all SIP and HTTPS traffic between your office and our infrastructure.
  • AES-256 encryption at rest on stored PDFs.
  • Role-based access controls for multi-user accounts — billing sees billing faxes, clinical sees clinical, admin sees all.
  • Audit logs with timestamps on send, receive, view, and delete events.
  • Configurable retention so you can match your practice's document retention policy.
  • Two-factor authentication available on user logins.

Three setup patterns we run most

Solo or two-provider practice

Standard plan, port the existing number, two to three user logins, email-to-fax for sending. Total cost under $30 a month all-in. Cuts a copper line and a maintenance contract.

Mid-size practice or firm with 5 to 15 staff

Power or Power Plus plan, role-based access (front desk sees admin faxes, clinical sees clinical faxes), shared inbox conventions for billing, BAA in place. Often paired with our healthcare phone system or legal phone system. Sometimes paired with the adapter option to keep an existing fax machine alive for staff that prefers it.

Multi-location or high-volume

Custom plan with location-specific numbers funneling into one centralized fax operations queue, API integration into the EHR or document management system, single sign-on. We quote, build, and train. This is the pattern for hospital outpatient clinics, multi-office law firms, and lending operations.

What an operator-run service means vs a reseller

The cloud fax space has roughly three layers: a handful of operators that own the actual fax infrastructure (we're one), a larger group of resellers that white-label one of those operators, and a third group of integrators that build dashboards or workflow tools on top of either. Customers usually can't tell which they're buying from until something goes wrong.

It matters in three situations:

  • A port that's stuck. Resellers have to escalate through their upstream provider; operators escalate directly to the losing carrier. Faster fix.
  • A delivery failure. Resellers have to ask their upstream for logs; operators have the logs in-house. Faster diagnosis.
  • A compliance question during an audit. Resellers often can't sign the BAA for the underlying infrastructure because they don't operate it. Operators sign one BAA covering the whole stack.

If you're talking to a vFAX vendor, ask whether they own the platform. The honest answer is sometimes "no." That's fine for some use cases. For regulated industries it's worth knowing.

What integration into an EHR or DMS looks like

On the Pro and Custom plans, we expose an API that lets your EHR or document management system pull inbound faxes automatically. Typical integration:

  • Inbound fax arrives at our service.
  • API endpoint or webhook notifies your system with metadata (sender number, page count, timestamp).
  • Your system pulls the PDF and attaches it to the right patient chart, matter, or file based on rules you configure (caller ID, OCR, manual tagging).
  • Audit log records the retrieval.

Outbound is the inverse: your system pushes a PDF and destination fax number through the API; we handle transmission and return a delivery confirmation. Most modern EHRs (athenahealth, eClinicalWorks, Epic via app orchard, NextGen, Practice Fusion, and others) either have native cloud fax connectors or accept generic webhook integrations.

Common mistakes

  • Picking the cheapest plan when actual volume is mid-tier. Overage charges add up fast.
  • Letting fax-to-email be the only receive method. If your email goes down, you lose visibility on inbound. Always also use the portal.
  • Not configuring role-based access. Front desk doesn't need to see lab orders in the queue.
  • Skipping the BAA because the practice administrator forgot to ask. Get it signed before cutover.
  • Forgetting to update the fax cover sheet with the new sender info. Every outbound fax should still reference your practice.
  • Canceling the copper line too early. Wait for two consecutive clean days on the new service.
  • Not training staff on the portal. Email-only users miss the search and archive features that justify the cost.
  • Treating retention as a default. Set the retention policy explicitly; don't let it be whatever the provider's default is.

What to ask a fax provider

  • Are you an operator or a reseller? If you go down, who do I actually call?
  • What's the audit log retention period?
  • Will you sign a BAA at no extra cost for a healthcare account?
  • What's the per-number porting fee and timeline?
  • What's your published page allowance and per-page overage?
  • How do I get role-based access for my staff?
  • What encryption do you use in transit and at rest?
  • Do you have an API or webhook for EHR integration?
  • What does the search and archive look like in the portal?

What we don't do

We don't offer disposable fax numbers for marketing campaigns. We don't sell bulk fax broadcasting. We don't compete on free tiers that disappear after 30 days. vFAX is a paid, supported service for businesses that actually need fax to work every day. We don't sell to telemarketers or anyone using fax for cold outreach — that's against TCPA rules and against our terms.

Where to start

If you are still paying for an analog fax line, or you bought a cheap fax-to-email service and the support disappeared, talk to us. We will look at your current fax volume, your number-porting situation, and which plan fits, then quote it.

Start on the vFAX product page, or jump straight to get started and we will follow up the same business day. Practice-specific setups are covered on our healthcare, dental, and legal firm pages. Wellness clinics: see wellness clinic phone system. Questions first? Contact us and a real person from our Ocoee office will get back to you. More background on us: about.

Mobile and Remote Work on VoIP: What Actually Changes
Hosted VoIP makes location stop mattering for inbound calls. Here is how that plays out for hybrid teams, field crews, and travelers.