Tenant-scoped storage
Every fax message, recipient, and PDF is bound to a single tenant. A multi-branch agency operates one fax line; a multi-tenant CSM cannot accidentally see fax content across tenants without an audit-logged impersonation session.
Private blob storage
PDFs live in Azure Blob with no public URLs. Downloads route through a Django view that audit-logs who accessed which fax, when, from which IP. Same audit standard as every other PHI surface in the platform.
Cover-sheet HIPAA notice
Default cover sheet ships with the standard HIPAA confidentiality notice ("If you are not the intended recipient, please notify the sender immediately and destroy all copies."). Editable per tenant if your compliance team requires variant language.
Provider abstraction
Telnyx is the default provider, but the adapter pattern (same as our Stedi clearinghouse architecture) means we can swap to Documo, Sinch, or another HIPAA-compliant fax vendor without touching tenant data. Provider lock-in is not your problem.
BAA on file
Carelytic carries a BAA with our fax provider for the platform-level account. Your tenant's BAA with us extends to fax automatically — no separate contract to negotiate, no separate vendor relationship to maintain.
Page-quota cost control
Optional per-tenant monthly page cap surfaces in the inbox header ("243 pages this month"). Helps Enterprise tenants spread cost across branches predictably and catch unexpected volume before the bill arrives.