Fax for Nonprofits: Affordable, Secure Faxing (2026)

By Alexey Spasskiy · Published November 13, 2026 · 8 min read

Fax for nonprofits comes down to three questions: how often you fax, whether the pages hold client or health data, and whether you need a number people can fax you back on. A small nonprofit can fax without buying a machine. An online service such as mFax sends and receives from a phone, a computer or a browser, and keeps a delivery receipt for every fax you send.

This guide covers when nonprofits still have to fax and what each option costs, with dated prices where the provider publishes them. It then looks at the record-keeping rules for federal grants, when HIPAA applies, and how to set up a small office in an afternoon.

Why Nonprofits Still Need to Fax

Nonprofits fax because the offices they work with still ask for it. A housing agency, a legal aid clinic or a community health center spends its day dealing with institutions that have not moved every intake form online:

• Benefit and government offices. Applications, verifications and signed releases for public benefits often go in by fax, especially when a caseworker is on a deadline.
• Courts and legal offices. Legal aid staff send filings, notices and signed documents to clerks and opposing counsel who list a fax number.
• Hospitals, clinics and insurers. Records requests, referrals and prior authorizations travel by fax between providers, so a health-related nonprofit receives as much as it sends.
• Landlords, schools and employers. Case managers fax verification letters and consent forms on behalf of the clients they serve.

The common thread is that the document is signed, sensitive and on a deadline. A fax gives you a record that it arrived, and that record is often why the other side still asks for one.

What Fax for Nonprofits Costs: Store, Machine or Online

Faxing costs a nonprofit anywhere from nothing, for a short occasional fax on a free site, to a monthly bill for a fax machine's phone line. Online plans with their own number cost a few dollars to a few dozen dollars a month. The cheapest option depends on volume, and on whether you need to receive faxes as well as send them.

One-off and occasional faxing

Free sites work for a one-page form that holds no private information. They are not built for client files, and neither FaxZero nor GotFreeFax gives you a number to receive faxes on.

Monthly online fax plans

Two things stand out. The cheapest headline plans rarely include a BAA, so a health program comparing entry prices can pick a plan it cannot use for patient records. And most mFax Business organizations are a single seat, a small office sending a few pages a month, so a price built from seats and pages costs less than a fixed tier sized for a company. For a wider comparison, see our guide to the best online fax for small business.

Which Option Fits Your Nonprofit?

The right option follows from volume and sensitivity. Use this rule of thumb:

1. A few faxes a year, nothing confidential. A free site or a single paid fax is enough.
2. Occasional faxes that include a client's details. Use an account-based service that encrypts the transfer and keeps the fax and its receipt in your history, rather than a free site with a page cap and its own branding on your cover.
3. Weekly faxing, or anyone who needs to fax you back. You need a fax number of your own, so pick a monthly plan sized to your pages.
4. Patient records, referrals or anything with PHI. You need a plan that comes with a signed Business Associate Agreement, which rules out most entry-level plans in the table above.

Staff turnover matters too. A fax machine at the front desk and a shared password tie your faxing to whoever sits nearest. An online account with individual logins keeps the history in the organization when a caseworker leaves.

Record Retention for Federal Grants: What 2 CFR 200.334 Requires

If your nonprofit spends federal grant money, the faxes tied to that award are part of your award records, and the retention rule is short. Under 2 CFR 200.334, "the recipient and subrecipient must retain all Federal award records for three years from the date of submission of their final financial report." Awards renewed quarterly or annually count three years from each quarterly or annual report.

The three years can stretch. Records must be kept until any litigation, claim or audit started inside the period is resolved. The period also runs longer if the federal agency or pass-through entity asks in writing. Records for equipment bought with award funds run three years from its final disposition. Beyond those exceptions, federal agencies and pass-through entities may not impose other retention requirements; state law and non-federal funders can still set their own, so check those too.

The next section, 2 CFR 200.336, matters for anyone who faxes from a screen: "The recipient or subrecipient does not need to create and retain paper copies when original records are electronic and cannot be altered." Paper you scan can be replaced by electronic copies, as long as the conversion process gets periodic quality-control reviews.

What that means in practice:

• File the fax with its receipt. Save the sent document and the delivery confirmation together in the grant file, so you can show what went where and when.
• Know what your fax service keeps. On mFax, sent and received faxes "stay in your history, with their documents, until you delete them," with "no automatic expiry and no setting to add one." Deleted faxes cannot be recovered, and faxes received on a shared number are not stored at all.
• Keep your own copy anyway. Download the PDFs into your document system on a schedule. If the account is closed, deleting it "removes everything at once."

When HIPAA Applies to a Nonprofit

HIPAA applies to a nonprofit only if it is a covered entity or works as a business associate for one. Tax-exempt status does not change that. Under 45 CFR 160.103, a covered entity is a health plan, a health care clearinghouse, or "a health care provider who transmits any health information in electronic form in connection with a transaction" the rules cover, such as billing an insurer electronically.

In practice:

• Covered: a community health center, a free clinic that bills Medicaid electronically, a behavioral health provider that files claims.
• Often a business associate: a nonprofit that handles patient records on behalf of a hospital or health plan, under a contract.
• Usually neither: a food bank, a tenant-rights group or an arts charity. Client privacy still matters, but HIPAA is not the rule that governs it.

If you are covered, the fax service that stores or transmits your patients' records has to sign a Business Associate Agreement with you. HHS says a covered entity that uses a cloud vendor to maintain ePHI without one violates the HIPAA Rules (HHS guidance on cloud computing). Our HIPAA compliant fax guide walks through the safeguards, and fax for healthcare covers clinic workflows.

On mFax Business, the BAA is included on every plan at no extra cost. The workspace owner opens Settings, chooses Review & sign on the Business Associate Agreement row, both sides sign electronically, and the row shows Signed with the date.

Protecting Client Data When You Fax

Every nonprofit holds information its clients trusted it with, so treat each fax as a disclosure, HIPAA or not. These habits cost nothing:

• Check the number twice. One wrong digit sends a client's file to a stranger's machine. Keep a list of the numbers you fax often rather than retyping them.
• Send the minimum. Fax the pages the recipient asked for, not the whole case file.
• Use a cover sheet with a confidentiality notice. Put no client details on the cover itself. Our free fax cover sheet generator needs no account; every sheet carries a small "sent with mfax.to" line. In the mFax app, tick Confidential to add a HIPAA confidentiality notice. More templates are in free fax cover sheets.
• Fill and sign forms on screen. The free Edit PDF tool lets you fill in and sign a release in the browser, with no upload and no printer.
• Keep the receipt. A delivered fax with a downloadable PDF receipt settles the question when an agency says nothing arrived.
• Give everyone their own login. Shared passwords make it impossible to tell who sent what.
• Expect junk faxes. A published fax number attracts unsolicited ads. Our guide to junk fax spam explains what you can do about them.

How to Set Up Fax for Nonprofits in a Small Office

Setting up an online fax line takes an afternoon, and no phone line or machine is involved. With mFax Business it looks like this:

Every fax, from the app or by email, lands in the organization's history as Delivered or Failed with the reason.

Choose the Setup That Matches Your Workload

If your organization sends a handful of faxes a year, a team plan is more than you need.

For the occasional fax, open the mFax app in your browser: upload a PDF or snap a photo, and send in under 2 minutes. Try it free for 7 days; the trial takes a card at checkout, and you can cancel anytime. The same account also works in the apps for iPhone, Android and Windows.

For a nonprofit office, mFax Business gives you your organization's own fax number, a signed BAA, email-to-fax and seats for the whole team across web, mobile and desktop. It starts from about $9/mo, and you build your own plan.