Current status: NerdFax's Business Fax Number product supports HIPAA-regulated fax workflows. Business Associate Agreements are executed with NerdFax's cloud infrastructure provider (Google Cloud) and fax-transport provider (Sinch), and every Business Fax Number account can execute its own Business Associate Agreement with NerdFax directly from the dashboard before sending or receiving protected health information (PHI).
Health Data & HIPAA Disclosure
Effective August 18, 2026. NerdFax is a product of Habibi Asset Management LLC.
1. What this covers, precisely
This disclosure applies to NerdFax's Business Fax Number product — a monthly-subscription fax number tied to a customer account. It does not apply to the anonymous, one-time $2.99 send flow, which has no account, no BAA execution mechanism, and is not intended for PHI. If you need to send or receive PHI by fax, use a Business Fax Number and execute a BAA first.
2. Business Associate Agreements
NerdFax has executed Business Associate Agreements with the vendors in its fax pipeline: Google Cloud (which provides the storage and compute NerdFax runs on) and Sinch (NerdFax's fax-transport provider). Separately, NerdFax offers its own Business Associate Agreement to Business Fax Number customers — reviewed by counsel — which a customer executes directly from their account before sending or receiving PHI.
3. How to send or receive PHI through NerdFax
- Sign up for a Business Fax Number.
- From your account, review and execute NerdFax's Business Associate Agreement — this is recorded with a timestamp and document version.
- Send and receive faxes normally. Every inbound fax is scanned for malware before it's stored, and access to stored fax content is limited to your own account.
4. Questions, or a custom agreement
If you'd like to talk to someone before signing up, or your organization needs a custom agreement: get in touch. That form only collects your name, work email, organization, and an optional message — never a document, never patient information. Signing up directly does not require this step.
5. What NerdFax does for every document, regardless of content
- Document content is never included in application logs or error reports.
- Document content is deleted from storage on a bounded schedule after a fax reaches its final outcome — see the Privacy Policy for specifics.
- The public proof/trace link for any fax exposes only non-identifying facts (dates, delivery status, page count, a cryptographic proof) — never the document, never a fax number, never a name.
6. Questions
Questions about this disclosure, or about a healthcare use case: support@nerdfax.com.