Skip to content

Fax Security and Privacy

Security controls

Compliance and privacy

  • Security reviews

    Discuss the requirements and scope of your planned use.

  • Privacy requests

    Ask for access, correction or removal of your information.

  • Regulated workflows

    Confirm your requirements before uploading sensitive information.

Data security

  • Private file storage

    Original documents and prepared PDFs are stored in private buckets.

  • Time-limited file links

    Access is checked before a signed file link is issued.

  • Private responses

    Document and account responses use no-store cache directives.

Access control

  • Verified account access

    Private account actions require an authenticated account.

  • Separate guest sessions

    A guest draft is tied to its session until an authorised transfer.

  • Account ownership

    Protected requests check the account that owns the fax.

Infrastructure

  • Application hosting

    Vercel supports the web application.

  • Authentication and storage

    Supabase supports identity, records and private files.

  • Service boundaries

    Payment and delivery use their own configured services.

Network security

  • Request origin checks

    Protected write routes validate the request origin.

  • Bounded requests

    File and request size limits apply before processing.

  • Destination validation

    Fax recipients are checked against supported destinations.

Application security

  • Input and file validation

    Uploads are checked for supported types and size limits.

  • Review before sending

    The final PDF and recipient are available for review.

  • Server-side credentials

    Privileged service keys are kept outside browser code.

Payment security

  • Stripe checkout

    Payment details are entered on Stripe’s checkout page.

  • Verified payment events

    The server checks signed events and their account association.

  • Page allowance

    The plan is recorded after payment confirmation.

Monitoring and logging

  • Document processing status

    The workspace shows preparation and conversion progress.

  • Recorded delivery events

    Delivery status follows the enabled provider’s events.

  • Monthly usage

    The account shows used and reserved pages.

Incident response

  • Security contact

    Use the Contact tab to reach the team.

  • Useful details

    Include the affected feature, timing and steps to reproduce.

  • Private information

    Keep credentials and unrelated files out of the report.

People and awareness

  • Verify the recipient

    Confirm the fax number and country code.

  • Review the pages

    Only include information needed for the intended recipient.

  • Protect credentials

    Keep session, password and recovery information private.

Data privacy and your rights

  • Data requests

    Tell us which records or information you want reviewed.

  • Account closure

    Closure is handled separately from deleting an individual fax.

  • Downloaded copies

    You control any files already saved or sent outside Fax.

Vendors and subprocessors

  • Provider roles

    The list distinguishes hosting, account services and billing.

  • Provider documentation

    Each card links to the provider’s own information.

  • Processing scope

    Provider assurances apply to the provider’s covered services.