21 CFR Part 11 and Faxing FDA-Regulated Records
FDA's 21 CFR Part 11 sets requirements for electronic records and electronic signatures in regulated industries like pharma, medical devices, and clinical research. Faxing a signed paper record is often the pragmatic Part 11 path. Send FAX Mail supplies audit trails, access controls, and retention that support that workflow — from $39.99/month.
21 CFR Part 11 Requirements for Fax
- System validation for electronic records and signatures relied on for FDA-regulated decisions
- Secure, computer-generated, time-stamped audit trails of record creation and changes
- Electronic signatures that are unique to one individual and linked to their record
- Access controls limiting system use to authorized individuals
- Copies of records available for FDA inspection in readable form
- Retention of records for the period required by the underlying predicate rule
How Send FAX Mail Meets 21 CFR Part 11
- A time-stamped, per-fax audit trail (sender, recipient, page count, delivery status) documenting each transmission
- Per-user login and role-based access so only authorized staff send and open regulated faxes
- Encryption in transit and at rest and configurable retention aligned to your predicate-rule period
- Readable PDF copies of every fax, retrievable for an FDA inspection
- A signed BAA on the Professional plan ($39.99/month) and above where the same records are PHI
- Honest scoping: Send FAX Mail is not a validated Part 11 e-records platform and its signature stamp is not a standalone Part 11 electronic signature — it best supports faxing a wet-ink-signed paper record
Industries Affected
Starter
- 600 fax pages per month
- 1 dedicated fax number
- Send & receive faxes
- Fax to email delivery
- Fax history & downloads
- No per-page overage charges
Professional
- 2,000 fax pages per month
- 3 dedicated fax numbers
- HIPAA compliance + self-serve BAA
- Sign documents before sending
- Priority delivery
- No per-page overage charges
Business
- 5,000 fax pages per month
- 5 dedicated fax numbers
- HIPAA compliance + self-serve BAA
- Public API & webhooks
- Audit logs
- Team roles & permissions
- Priority support
Enterprise
- 8,000 fax pages per month
- 10 dedicated fax numbers
- Everything in Business
- Public API & signed webhooks
- Dedicated support
- Custom integrations
No per-page overage. No activation fees. No contracts. Cancel anytime.
What’s current · as of August 2026
- HIPAA large-breach reporting threshold
- 500+ individuals — reported to HHS OCR without unreasonable delay Source: HHS Office for Civil Rights
- HIPAA documentation retention period
- 6 years from creation or last-effective date Source: HHS — HIPAA Administrative Requirements (45 CFR 164.316)
Recent updates
Federal interoperability rules keep pushing healthcare past the fax machine
CMS has advanced a series of interoperability rules that press hospitals, payers, and providers toward electronic data exchange and standardized claims attachments. The direction of travel is clear: paper and analog fax workflows are being replaced by digital transmission that carries an auditable record — which is exactly what a cloud fax with delivery confirmation provides for offices not yet on a full EHR pipeline.
CMS →Federal agencies still write fax into new rules and notices
The Federal Register — the daily journal of U.S. federal rulemaking — regularly publishes rules and notices that reference fax as an accepted or required submission channel for filings with agencies like the IRS, SSA, and CMS. That is why fax remains a live requirement for many official forms even as electronic portals expand.
Federal Register →Healthcare breach reporting keeps document handling under scrutiny
Ongoing reporting on HIPAA breaches and OCR settlements underscores how much scrutiny falls on how medical documents are stored, sent, and received. Sending records through a controlled, access-logged channel rather than an unmanaged machine reduces the mishandling risks that show up repeatedly in breach analyses.
HIPAA Journal →
21 CFR Part 11 Fax Compliance — FAQ
No. Part 11 requires system validation (such as IQ/OQ/PQ) for electronic records and signatures relied on for FDA decisions. Send FAX Mail is not sold as a validated Part 11 platform. It works well for transmitting a signed paper record, where the authoritative signature is wet-ink on the document you fax.
Not on its own. A Part 11 electronic signature must be unique to one person, permanently linked to the record, and non-repudiable, backed by system controls. Send FAX Mail's typed or drawn signature stamp does not by itself meet those manifestation requirements — for Part 11 records, sign on paper and fax the signed document.
It provides a time-stamped audit trail of each transmission, access controls, retained readable PDF copies, and configurable retention. In a paper-signature workflow those controls support your Part 11 obligations for handling the transmitted copy. Your QA and validation team owns the overall Part 11 assessment.
Faxing regulated documents is common between sites and sponsors. Send FAX Mail encrypts the transmission and logs an audit trail, and you can retain the readable copy for inspection. Whether your specific record needs a validated e-records system depends on how it is used for FDA-regulated decisions — confirm with your QA function.
21 CFR Part 11-compliant faxing starts at $39.99/mo
Encrypted transmission, audit logs, secure storage. No enterprise contract needed.
7-day free trial · No credit card required