IT directors

One less system to worry about. Not one more.

Medsender runs in the browser, works with the EHR and fax numbers your practice already has, and gives your team nothing to host, patch, or maintain. Security review takes an afternoon, not a quarter.

  • SOC 2 Type II certified
  • HIPAA compliant
  • BAA included

Review the security details

HIPAASOC 2 Type IIEnd-to-End Encryption

1,000+ independent practices trust Medsender

Trusted by practices from 1 location to 250+

One platform, not four systems

One integrated platform that replaces a pile of standalone systems.

Faxes, documents, and phone calls usually mean separate vendors, each with its own logins, contracts, and tickets. Medsender replaces your fax vendor, the answering service, and the referral tracking spreadsheet with a single platform, connected to your EHR. Start with one workflow and add the others when you are ready. Medsender handles the setup and works with your IT team every step of the way.

Shared foundationMicrosoft SSORole-based permissionsAudit trailHIPAA compliantSOC 2 Type II99.99% uptime

Everything in the diagram above is one vendor review, one contract, and one BAA. Staff can step in at any time, and every automated action is recorded in the audit trail.

Learn more about the Medsender platform

Security and compliance

Built to pass your security review.

Every claim below is standard on every Medsender account. No premium tier required, no add-ons.

Certification

SOC 2 Type II, independently audited

Certification is backed by continuous testing, not a once-a-year snapshot. Compliance is monitored in real time through Vanta.

HIPAA

Signed BAA with every account

A Business Associate Agreement is included at no additional cost, and a BAA is enforced with every vendor and subprocessor Medsender uses.

Encryption

Encrypted in transit and at rest

256-bit SSL in transit and 2048-bit private key encryption at rest. Documents are never stored or transmitted unencrypted.

Infrastructure

US-based, redundant, monitored

Hosted on Google Cloud with US-based servers, redundant systems, firewall and intrusion detection, DDoS protection, and daily security assessments.

Access control

Role-based permissions

Centralized user management, role-based permissions, and inactivity timeouts. Staff see what their role needs and nothing else.

Identity

Microsoft SSO

Sign-in runs through the identity provider you already manage, so onboarding and offboarding stay inside your existing process.

Read more about our security and compliance

Fits your stack

Nothing gets ripped out. Nothing gets replaced.

Your EHR stays the system of record

Incoming documents are filed to the correct patient chart in supported EHRs, so clinical teams keep working where they already work.

Your fax numbers stay the same

Referring providers keep sending to the numbers they already know. No porting project, no notification campaign.

No servers, no client installs

Medsender runs in the browser. There is no on-premise hardware to rack, no desktop agent to push, no patch cycle to own.

Works with the EHRs practices run on

Don’t see yours? We support additional integrations.

See all EHR integrations
Visibility and control

Every document accounted for. Every action traceable.

In most fax systems, a document that gets misfiled or deleted leaves no trail. In Medsender, every incoming fax, referral, and status change is recorded, so when someone asks “where did that document go,” there is an answer.

Automation stays supervised. AI handles the reading and routing of incoming documents, staff can step in on any item, and role-based permissions decide who can see and act on what.

Support load

The fax tickets stop hitting your team's queue.

Most private fax solutions leave your team owning a system: password resets, desktop clients, license counts, a server that has to stay up. Medsender runs in the browser with sign-in through Microsoft SSO, so the fax-related tickets, the resets, the client installs, the server upkeep, stop landing on your team.

Staff questions go to Medsender support, not to your team. And when someone new starts, there is nothing to install on their desktop.

Your team's part stays small: approve Medsender in your Microsoft tenant, add it to your allow lists, and manage who has access through your identity provider. Medsender handles the rest.

Rollout

Live in weeks. Minimal work for your team.

1

Security review and BAA

You get the compliance documentation up front: SOC 2 Type II certification, encryption specifications, and the signed BAA.

2

Connection and configuration

Medsender connects supported EHRs, configures your existing fax numbers, and sets up roles and permissions to match how your teams work. If your EHR requires access on your side, your team is looped in for that step.

3

Go live, team by team

Locations and teams come online on your schedule. Medsender trains staff and stays on support, so go-live tickets never reach your team's queue.

What IT leaders say

Vetted by people who do your job.

If I started a new job at another medical facility tomorrow, I would just give Medsender a call. I would not even shop.
AF
Adam Frank
IT Manager, Willamette ENT Salem
Our staff was spending countless hours each day manually reading, typing, and uploading faxes to where they belong. Using Medsender, we can free our staff from these repetitive steps and ensure we schedule patients for care faster than ever before and receive the most efficient care possible.
AM
Ahmad Malik
CIO, CORA Physical Therapy
We were experiencing aggressive growth, but our leadership team needed us to keep staffing flat. To meet growth demands without adding headcount, we turned to Medsender.
PD
Pete DeRego
Director of Information Technology, Optima Dermatology
HIPAA compliantSOC 2 Type II auditedSigned BAA included with every accountReview our security practices →

One approval. Zero maintenance.

See how Medsender fits your EHR and what rollout involves for your team. When you are ready for a security review, the compliance documentation is ready too.

Book a 30-minute demo

Not ready yet? See what referral leakage is costing you.

FAQs

Questions IT leaders ask about Medsender

Yes. Medsender is HIPAA compliant and SOC 2 Type II certified, with certification backed by continuous testing rather than an annual snapshot. Compliance is monitored in real time through Vanta, and a signed BAA is included with every account at no additional cost.
Documents are protected with 256-bit SSL in transit and 2048-bit private key encryption at rest, and are never stored or transmitted unencrypted. Hosting runs on Google Cloud with US-based servers, redundant systems, firewall and intrusion detection, DDoS protection, and daily security assessments.
Nothing. Medsender runs in the browser, so there are no servers to host, no desktop clients to push, and no patch cycle to own. Your existing fax numbers keep working, and Medsender handles hosting, updates, and monitoring.
User management is centralized, with role-based permissions and inactivity timeouts. Microsoft SSO is supported, so sign-in runs through the identity provider you already manage and offboarding stays inside your existing process.
The packet is available up front: SOC 2 Type II certification, the signed BAA, encryption specifications, and an infrastructure overview. Compliance is monitored continuously through Vanta, and a BAA is enforced with every vendor and subprocessor Medsender uses.
Your fax numbers stay the same, and referring providers keep sending to the numbers they already know. Documents arrive in the browser, so there is no fax server to keep up, no desktop client to maintain, and nothing to install when someone new starts.
In supported EHRs, incoming documents are filed to the correct patient chart, so the EHR stays your clinical system of record. Capabilities vary by EHR, and your Medsender team confirms exactly what applies to yours before rollout.
Your practice’s documents remain your practice’s documents. Export options, retention settings, and offboarding steps are covered in the security review, so your team knows exactly how data is handled before anything goes live.