Security & Trust Center
What security measures does FaxLock implement?
FaxLock is built with a security-first architecture designed to protect Protected Health Information (PHI) and sensitive financial data. Our core safeguards include:
- End-to-End Encryption: Documents are encrypted in transit (TLS) and at rest (AES-256).
- Access Controls: Strict role-based access control (RBAC) and multi-factor authentication (MFA) for all production systems.
- Immutable Audit Logs: Real-time tracking of every transmission, providing compliance officers with a clear audit trail.
- Automated Data Deletion: Your documents are permanently purged from our servers after delivery.
Trust & Verification Checklist
We believe in transparency. Here are direct answers to the most common security verification questions:
| Security Question | FaxLock's Status |
|---|---|
| SOC 2 Certification | Currently undergoing SOC 2 Type II audit. Infrastructure is hosted in ISO 27001-certified data centers. |
| Encryption Keys | Managed securely via cloud KMS with strict access policies. |
| BAA (Business Associate Agreement) | Yes. Signed BAAs are offered as standard for all HIPAA-covered entities. |
| Data Retention | 72 hours post-delivery, 24 hours post-failure. See our Privacy Policy. |
| Data Deletion | Documents are permanently and automatically deleted from our servers. |
| Infrastructure | ISO 27001-certified data centers, protected by Cloudflare. |
| Incident Response | 24/7 monitoring and automated alerting. Contact support@faxlock.com for the full incident response policy. |
Frequently Asked Questions (FAQ)
Does FaxLock have SOC 2 certification?
FaxLock is currently undergoing a SOC 2 Type II audit. Our infrastructure is hosted in ISO 27001-certified data centers, and we enforce strict access controls and multi-factor authentication for all production systems.
How does FaxLock manage encryption keys?
FaxLock uses AES-256 encryption for data at rest and TLS 1.2+ for data in transit. Encryption keys are managed securely via cloud key management services (KMS) with strict access policies.
Can I sign a Business Associate Agreement (BAA) with FaxLock?
Yes. FaxLock signs Business Associate Agreements (BAAs) with all covered entities and their business associates to ensure compliance with the HIPAA Privacy and Security Rules.
How long does FaxLock retain documents?
Uploaded PDFs are automatically and permanently deleted from our servers 72 hours after successful delivery, and 24 hours after a failed or refunded transmission.
Where are FaxLock's servers hosted?
FaxLock's infrastructure is hosted in secure, ISO 27001-certified data centers. We utilize Cloudflare for DDoS protection and edge routing.
Ready to send a secure fax?
Experience AES-256 encryption and no monthly fees with FaxLock.
Send a Fax Now