The fax machine in your records room is costing you more than you think. Between the analog line, toner, paper, jammed pages someone has to re-feed, and the staff time spent walking documents around the office, a single fax can cost $2-$3 by the time it lands in a chart. Worse, every page printed in an open area is a HIPAA exposure waiting to happen. Healthcare runs on fax because referrals, prior auths, and pharmacy orders still demand it. The fix is not to abandon fax. The fix is to move it to the cloud.
We are VoIP International, headquartered in Ocoee, Florida, with customers nationwide. We run vFAX for medical practices, dental offices, wellness clinics, and specialty groups across the country. Pricing is straightforward: $25/mo for 500 pages, $35/mo for 1,000 pages, $49/mo for 2,500 pages, with a custom tier for high-volume groups. HIPAA-compliant configuration is included. No machine, no analog line, no toner. The BAA gets signed before you go live.
What changes when you move fax to the cloud
Inbound faxes arrive as PDFs in a secure inbox or directly to a staff email address that lives behind the BAA. Outbound faxes go from a web portal or a desktop print driver. The fax number is yours, ported from your existing carrier in about a week. Once it is set up, the rhythm of the office shifts:
- Referrals route to the right person. Front desk does not have to walk a fax to the back. The PDF arrives in the right inbox.
- PHI does not sit on a tray. Pages are never printed unless someone chooses to print them.
- Audit trail is automatic. Every send and receive is timestamped and logged. If a payer disputes whether a prior auth was sent, you have proof.
- Remote staff can fax. A billing manager working from home can send a fax from the same number the practice uses.
- Volume scales without new hardware. Add a second number, add a third inbox, raise your monthly page allowance, all from the portal.
HIPAA, BAA, and the boring details that matter
Healthcare buyers ask three questions before anything else: Is it HIPAA-compliant? Will you sign a BAA? What happens if a fax fails? Our answers: yes, yes, and you get a delivery receipt for every transmission with retry on failure. We sign a Business Associate Agreement as part of onboarding. Storage and transmission are encrypted. Access is controlled by user, not by whoever happens to be near the machine.
Access controls let you assign each user a role: send-only, receive-only, full access, or read-only audit. Role-based access matters when a compliance officer asks who saw a specific fax. With a fax machine, the answer is "anyone who walked past the tray." With vFAX, the answer is a list of named users with timestamps.
Retention is configurable. Most practices keep transmission metadata for the full HIPAA-required period and configure the inbox to auto-archive PDFs after they have been pulled into the EHR. Storage is encrypted at rest. Transmission is encrypted in transit. When we sign the BAA, both sides of that document mean something specific about how the data is handled.
If your practice also runs a phone system that needs to meet HIPAA, our healthcare phone system adds HIPAA configuration for $49/mo on top of the standard phone service. Same operator, same support team, one bill. Dental and wellness practices get dedicated configurations at dental practice phone system and wellness clinic phone system.
How vFAX fits into EHR and practice workflows
Most modern EHRs accept faxes as PDF attachments. Once a fax lands in a vFAX inbox, it becomes a document that can be saved to the patient chart in a few clicks. We have customers running Athena, eClinicalWorks, Practice Fusion, Dentrix, Open Dental, Kareo, and a handful of specialty platforms who handle inbound faxes this way every day.
Inbound referral workflow
A specialist's office sends a referral fax to your dedicated referral number. The PDF lands in the referral coordinator's inbox in under a minute. The coordinator opens the PDF, drags it into the patient's chart, and assigns the task to the scheduling team. No paper involved, no fax machine to babysit, no PHI sitting on a tray for anyone walking by to read. The referring physician gets a delivery receipt automatically, so they know it landed.
Outbound prior auth workflow
The billing team builds a prior auth packet in the EHR, exports as PDF, and prints to the vFAX driver. The fax goes out, the delivery receipt comes back, and a copy of the transmission lives in the audit log indefinitely. When the payer claims they never received it three weeks later, the receipt is the answer. Re-faxing is a single click rather than re-collating a stack of paper.
Pharmacy orders and lab orders
Most pharmacies still take fax orders. Most independent labs still send results by fax. Both work exactly the same as they did with the machine, except the staff member sending the order does not have to walk down the hall and the result lands in an inbox instead of on a tray. Pharmacy callbacks and clarifications route to the prescriber's own inbox, not a shared printer.
Records release workflow
A patient requests records released to another provider. Staff builds the package in the EHR, exports the PDF, and faxes from the portal. The release is logged with a timestamp. When an auditor asks for proof a records request was fulfilled, the proof is in the system.
What it looks like in a real office
A two-location family medicine group we onboarded last year was running two analog fax lines, two physical machines, and burning roughly 4,000 pages a month between referrals and pharmacy. Hard cost of analog lines and supplies ran about $180/mo. Soft cost of staff time was higher: roughly an hour a day across both offices walking faxes, refilling paper, clearing jams. They moved to the $49 vFAX tier, ported both numbers, and decommissioned the machines. New monthly cost: $98. Staff time recovered: about 20 hours a month. The clinical team stopped seeing PHI sitting on the tray when they walked past the records room.
A solo dermatology practice on the $25 tier replaced a $52/mo analog line and a $40/mo maintenance plan on an aging fax machine. The practice manager runs the inbox from her laptop. When she travels, the inbox still works. The total fax workflow now costs $25/mo and never produces a paper jam. The practice manager said the biggest change was that she stopped dreading Mondays, because the weekend fax pile no longer existed.
A four-provider OB-GYN group with about 8,000 pages a month moved to a custom tier and routed inbound faxes to three distinct queues: clinical results to the clinical team, prior auths to billing, and referrals to scheduling. The single biggest gain was not the cost saving. It was that the front desk stopped being the routing department for inbound faxes.
Common mistakes practices make with cloud fax
- Shared inbox with no permissions. Routing every fax to a single shared mailbox that any staff member can read defeats the purpose of HIPAA controls. Set up role-based inboxes: referrals to the referral coordinator, billing faxes to the billing team, clinical results to the clinical team.
- Personal email forwarding. Forwarding a vFAX to a personal Gmail account is a BAA violation. The fax stays inside the encrypted vFAX inbox or moves directly into the EHR.
- Skipping the port. A new fax number means re-papering every referring physician, every pharmacy, every payer. Port the existing number. We handle the paperwork.
- Keeping the machine "as a backup." If you keep the analog line and the machine alive in parallel, you are still paying for both and you still have PHI sitting on a tray. Decommission it.
- No retention policy. PDFs sitting in an inbox forever is a different kind of HIPAA exposure. Configure auto-archive once the document has been pulled into the EHR.
- One mega-account for the whole staff. Per-user logins exist for a reason. Audit trails only work when each action ties to a named person.
What to ask any HIPAA fax provider
- Will you sign a BAA before we go live, and is it included in the standard contract?
- How is data encrypted in transit and at rest?
- How long are transmission records retained, and is the retention period configurable?
- Who at the company has access to my fax data, and under what conditions?
- What is the porting timeline and the porting fee?
- What happens if a fax fails to transmit? Is there an automatic retry, and how am I notified?
- Is there an audit log that captures who viewed each inbound fax and when?
- What happens to my data if I cancel? Can I export the archive?
If a provider hesitates on any of those, look elsewhere. We can answer all eight on a 15-minute call.
What vFAX is not
Cloud fax is not a replacement for secure messaging when secure messaging is available. If your referring partners use a secure direct messaging protocol or a shared EHR, use that instead. vFAX exists because most of healthcare still runs on fax and that is not changing fast. We are not going to oversell what it does.
vFAX is also not a substitute for a phone system. It handles fax. If you need phones with HIPAA controls, that is a separate product and a separate decision. The two work well together when you buy both from us, but vFAX on its own is just fax.
vFAX is not free of the underlying limitations of fax itself. If a sending fax machine on the other end produces a poor scan, we deliver the poor scan faithfully. If the sender dials the wrong number, we deliver the fax to whoever owns that number. Fax is fax. The cloud version is more reliable, more auditable, and more secure than the analog version. It is not a different protocol.
The 30-day rollout we use
Day 1: Initial scope call. Confirm fax volume, current number count, and BAA requirements.
Day 2-5: BAA signed. Inbox structure designed around your workflow. Numbers submitted for porting.
Day 6-10: Inbox configuration, user accounts created, role-based access set. Staff training scheduled.
Day 10-15: Numbers port. We run parallel for 24 hours so nothing drops. Old machines stay on as a safety net.
Day 16-20: Old machines decommissioned. Analog lines canceled with your carrier. Practice is fully on vFAX.
Day 21-30: Tuning. We watch the first two weeks of usage and adjust inbox routing, user permissions, and retention policies based on what we see in the data.
Picking the right tier for your practice volume
The three core tiers map to typical practice sizes pretty cleanly. A solo provider or two-provider practice that mostly receives results and a few outbound orders fits in the $25 tier with 500 pages. A four- to six-provider practice doing referrals, prior auths, and pharmacy orders lands in the $35 tier with 1,000 pages. A multi-provider group or busy specialty practice usually picks the $49 tier at 2,500 pages. Above that, the custom tier is the answer. You will not pay more than you need to. We do not push tiers people do not use.
What we look at to size your tier: average inbound fax count per business day, average outbound fax count, and any predictable spikes (Mondays are often double, end-of-month billing pushes outbound up). If you are not sure, start one tier down and let the data tell us. Overages exist and are reasonable, and bumping up a tier is one portal change.
What a fax audit looks like before we propose a tier
If you have access to call detail records for your existing analog fax line, we can read them and propose a tier based on real numbers. If not, a quick walk through a typical day works: how many faxes hit the tray on a Monday morning, how many get sent to pharmacies in an afternoon, how many records releases happen in a week. Most practices have a rough sense even without records, and we calibrate after the first month of real usage.
The integrations that matter for medical billing teams
If your billing operation runs on a clearinghouse, vFAX integrates with most of them via email-to-fax. The clearinghouse sends a fax through our inbound number, the PDF lands in the billing inbox, and the team works through prior auths and appeals from there. Outbound, the team prints to the vFAX driver and sends. Reconciliation between sent items and payer responses is easier with the delivery receipt logs than with a paper trail.
Where to start
If you are still running a fax machine, start with a port. Pick the tier that matches your page volume, send us the number, and we handle the rest. We sign the BAA, configure the inboxes, and train your staff in about 30 minutes. Most practices are live within five business days of signing for the initial inbox, with the port completing inside two weeks. See vFAX pricing and plans, the full healthcare phone system bundle, or contact us to talk through a HIPAA setup for your practice. We will tell you on the call whether the move makes sense for your volume.