Is faxing medical records HIPAA compliant?

Faxing medical records is a long-standing accepted channel under HIPAA. The HIPAA Security Rule requires reasonable safeguards on PHI in transit, and a direct phone-line fax (what Shotfax uses via Telnyx) is generally considered compliant between covered entities. For a covered entity or business associate sending PHI as part of their job, a Business Associate Agreement with the fax provider is required. Shotfax does not sign BAAs by default; if you are a covered entity and need a BAA, email support@shotfax.com before sending. For a patient faxing their own records to their doctor, HIPAA does not impose BAA requirements on the patient.

Where do I find a doctor's fax number?

The best source is the office's front desk. Call and ask for the records-department fax number. Websites often list a general fax that gets routed through several desks, while the records fax goes directly to the staff who file charts. Some practices also list a dedicated referral fax, a pharmacy fax, and a billing fax. Ask for the one that matches your purpose.

Can I fax health records to an insurance company?

Yes. Most insurance companies accept claim documentation and authorization forms by fax. The correct fax number is on the back of your insurance card or on the EOB (Explanation of Benefits) for the specific claim. Include your member ID and the claim number on a cover sheet so the fax is routed to the right adjuster.

Should I fax or use the patient portal?

If your provider has a patient portal and the document can be uploaded there, use the portal. It is faster and lands directly in the chart. Use fax when the provider does not offer a portal, when the portal is down, when you are sending records from an outside provider who is not in your portal network, or when the receiving side explicitly asks for fax (common for specialists, insurance prior authorizations, and legal subpoenas).

What should a medical records cover sheet include?

Patient's full name, date of birth, patient ID or member ID if applicable, the recipient's name or department, your callback phone number, a short description of the records attached, the date, a total page count, and a standard confidentiality notice. Keep it to one page.

Can I fax from my phone?

Yes. Shotfax works in a mobile browser. Snap a photo of each page with the iPhone Notes Scan Document feature or Android's Google Drive scanner (both produce clean PDFs), upload to shotfax.com, enter the fax number, pay $2.99.

How to guide · By Povilas Konopackas, founder · Updated May 2026

How to fax medical records in 2026.

Your doctor's office still wants a fax. So does your insurance company's prior-authorization desk, your attorney's office when they subpoena records, and the specialist you were referred to. This guide covers how to get the records from your phone or computer to the receiving fax, what belongs on the cover sheet, and when fax is the wrong choice.

1. Why doctors still use fax in 2026

Fax in healthcare is the legal floor. Most US hospitals and clinics still accept fax because it is explicitly recognized under HIPAA as an acceptable channel for transmitting Protected Health Information, it leaves a transmission receipt that can be produced in an audit, and it works with every other provider in the country regardless of which electronic health record (EHR) they use. Email, by contrast, is a minefield under HIPAA unless both sides have end-to-end encryption and matching BAAs.

The result: around 9 billion fax pages a year move through US healthcare, and a patient requesting their own records or forwarding records to a new provider frequently hits a "please fax to ..." instruction somewhere in the process.

2. When fax is the right choice (and when it is not)

Fax is the right choice when:

The receiving office explicitly asks for fax (referrals, prior auth, subpoenas, insurance claims).
You are forwarding records between two providers who are not on the same EHR.
You need a timestamped proof of transmission for legal or insurance purposes.
The portal is down or you do not have an account on the receiving side's portal.
You are sending from a phone or computer where printing and walking paper to a clinic is impractical.

Fax is the wrong choice when:

Your provider has a patient portal and the document fits the upload format it accepts. Portal uploads land directly in the chart and are faster.
The receiving side accepts secure email or a dedicated transfer link. Use it.
You need to send Protected Health Information as a covered entity or business associate and you need a Business Associate Agreement with your fax service. Shotfax does not sign BAAs by default. If you are on the covered-entity side of a transmission and need a BAA, email support@shotfax.com before sending. A patient faxing their own records does not trigger this.

3. Finding the right fax number

The fax number on a clinic's website is often a generic line that routes through several desks. The correct number depends on what you are sending:

Records request or records transfer. Call the office and ask for the medical records department fax. Usually a separate number from the main line.
Referral or new-patient documents. Ask for the referral coordinator fax. Specialist offices often have dedicated referral lines.
Prior authorization for a medication or procedure. The fax is on the insurance company's prior-auth form. Different insurance plans have different prior-auth fax numbers by drug class or procedure.
Insurance claim documentation. On the back of your insurance card, or on the EOB for the specific claim.
Legal request (subpoena, attorney-initiated). Legal fax is usually separate from medical records fax. Ask the requesting attorney's office which number they want it routed to on their side.

Call first. A 30-second phone call saves you a failed fax, a $2.99 refund delay, and possibly a missed deadline.

4. The cover sheet that works

One page, minimal formatting, everything the receiving staff needs to route the fax without calling you. Keep it to:

MEDICAL RECORDS FAX COVER SHEET

To:      [Recipient name or department]
Fax:     [Receiving fax number]
From:    [Your full name]
DOB:     [Your date of birth]
Patient ID or MRN:   [If you have one]
Phone:   [Callback number]
Date:    [Today]
Pages:   [Total pages including this cover]

Re: [One-line description of what is attached. For example:
     "Records request for referral to Dr. Kim, dated 2026-04-17"]

The attached documents contain confidential patient health
information and are intended only for the named recipient.
If you received this fax in error, please call the sender
at the phone number above and destroy the documents.

That confidentiality notice at the bottom is standard HIPAA practice. It does not create legal obligations on the sender, but it flags the fax as PHI to anyone who might receive it by mistake.

5. Preparing the records

Fax resolution is 196 DPI, monochrome. That is enough for readable text and signatures but unforgiving for poor scans.

Scan, do not photograph, if possible. Every modern phone has a scanner built in. iPhone Notes has Scan Documents. Android Google Drive has Scan to PDF. Both produce cleaner PDFs than raw photos.
Good lighting, flat surface. If you must photograph, put the paper flat on a dark non-glare surface, phone directly above, even light. Avoid shadows from your hands.
Single PDF, cover sheet first. If you upload the cover and records as two separate files, they become two separate faxes on the receiving end and get split in routing. Combine into one PDF.
File size under 10 MB. Shotfax caps at 10 MB. A 20-page scan easily fits. A video of a scan does not.
Page order matters. The fax arrives in the order you uploaded. Cover sheet page 1, then records in the order the receiver expects (chronological for a longitudinal record, prioritized for a specialist referral).

6. Sending the fax

Open shotfax.com.
Drop the combined PDF into the upload area.
Type the receiving fax number with +1 for US or Canada, or the full international format (for example +44 for the UK). Shotfax auto-formats and confirms the country.
Add your email so the delivery receipt PDF is emailed to you after the fax lands. This is optional but recommended for records faxes; the receipt is your timestamped proof.
Tick the acknowledgment checkbox and click Send fax.
Pay $2.99 flat via Polar checkout. Shotfax supports documents up to 20 pages; longer files are rejected before payment.
The success page updates to delivered in about a minute. If delivery fails (busy line, wrong number, not a fax), you are refunded automatically within 7 business days.

7. Confirming receipt

A delivery receipt from Telnyx confirms the fax reached the number and the receiving fax machine acknowledged it. It does not confirm a human has routed the fax to the right desk. For anything time-sensitive (a referral with a same-week appointment, a prior auth that blocks a medication refill), call the receiving office 30 minutes after the send and confirm they have the fax in the correct staff member's queue.

If the fax is not there after 60 minutes, check:

Did you use the right fax number for the department you needed?
Did the clinic's fax machine receive it but then misroute it internally? (Ask for the front-desk records person to check the shared inbox.)
Did Shotfax mark it delivered or failed? If failed, you have been refunded; re-send to a verified number.

8. Common mistakes

Sending without a cover sheet. A naked records fax has no name on it. It sits in a shared tray until someone figures out whose chart it belongs to.
Missing the date of birth on the cover sheet. Multiple patients can share a name; DOB disambiguates. Required at most clinics.
Faxing low-contrast scans. Yellow sticky notes, light-pencil notations, and red ink on colored paper do not survive monochrome fax conversion. Transcribe important markings onto the cover sheet if they risk being lost.
Using the main clinic fax for medical records. Records faxes often belong on a different line. The front desk will tell you which.
Not keeping the delivery receipt. Save the PDF Shotfax emails you. It is your proof of transmission if a dispute arises later.

Ready to send medical records?

$2.99

Up to 20 pages. No account, no subscription.

Send your fax now