Relevant Product Characteristics
- This product does not appear to have been designed specifically with healthcare in mind. Note that many products that are useful and appropriate for health care professionals are not designed specifically with health care in mind.
- The features and/or settings for this product are different for health care customers as compared to general customers.
- Often this means the product adjusts for health care customers in order to meet HIPAA requirements, and/or to offer features that are only useable by health care practices (e.g. Square only allows health care customers to run HSA and FSA cards.)
Our Progress Notes
SRFax is a web-based faxing service with a ton of high quality features at a shockingly low price for their entry-level healthcare plan, on which they will execute a BAA! We really liked their simple interface which helps them stand out in a field mostly dominated by companies that haven’t updated their design since 1999. Their support was very responsive to our requests and quite knowledgeable about the ins and outs of their security options. SRFax had many recommendations about how best to protect PHI, so it’s clear that catering to the healthcare market isn’t just an afterthought for them.
SRFax will execute a customer provided BAA, but does not provide their own standard BAA. You might, at this point, be thinking “is that a cause for concern?” and “where do I get a BAA to provide them? Providing my own BAA sounds expensive.” First, we actually see it as a positive when a company will execute a BAA of the customer’s choosing/provision and don’t insist on their own. (That said, we do not see it as a negative when a company provides their own BAA. We just advise you, as with any legal agreement, thoroughly read it — like we do — to be aware of both your responsibilities under the agreement and any exclusions of what is covered/any potential loopholes for the company that is your business associate.) Second, HIPAACOW to the rescue! HIPAACOW is a volunteer organization in Wisconsin that produces utterly amazing, highly professional work that should by all rights cost us thousand of dollars. They give it out for free, though. So take advantage! One of the many items they offer is a sample Business Associate Agreement contract. Be sure to download the one that is updated for the 2013 HIPAA Omnibus Rule: HIPAACOW Security and Privacy Documents→
To request that SRFax execute a BAA with you, you can do so on their site by clicking here and selecting “request BAA” under “topic.”
This product offers a free service tier or a free trial account:
We encourage all clinicians interested in this product to try out the free trial or experiment with the free tier to see if it suits your needs.
If you discover anything of concern that isn’t addressed in this review yet, please tell Liath about it at firstname.lastname@example.org.
- Click here for the free trial or free service tier information→. Important note about Business Associate Agreements: This product offers a Business Associate Agreement with the free trial or free service tier. Be sure to get your BAA from the company before using client information while you test the product.