Apollo's Templates
HomeBusinessFax Cover SheetHIPAA
HIPAA · Healthcare fax cover sheets

HIPAA Fax Cover Sheet — Free Templates

Four free fax cover sheet templates pre-printed with a PHI confidentiality notice — fillable PDF and editable Microsoft Word. For medical, dental, behavioral-health, and pharmacy offices that fax records and need a clean cover sheet they can hand to a compliance officer for review.

Important — please read before downloading

These templates are not “HIPAA-certified”. There is no such certification for fax cover sheets — HHS does not certify, approve, or endorse any specific template. The templates on this page include a generic PHI confidentiality notice and conservative design language commonly used in healthcare contexts.

Use of these templates does not, by itself, make your organization HIPAA-compliant. Compliance depends on your administrative, physical, and technical safeguards as a whole. Have your compliance officer or legal counsel review the included confidentiality notice and adapt it to your practice before adopting it.

Apollo’s Templates is not a HIPAA Business Associate — we provide downloadable templates as a tool. Every field is filled in inside your own browser or copy of Microsoft Word; the completed file never reaches our servers. See the Privacy Policy and Legal Disclaimer for the full picture.

Pick a design + format

Four designs · two formats.

Each HIPAA-collection cover sheet ships with the standard fields plus a pre-printed PHI confidentiality notice. The Word .dotx is editable end to end if you need to swap in your firm's approved notice wording.

About these templates

What's different from the standard collection.

The HIPAA collection adds two pieces to our standard fax cover sheet: a thin red CONFIDENTIAL · CONTAINS PROTECTED HEALTH INFORMATION (PHI) banner across the top of every page, and a pre-printed confidentiality notice in a bordered block above the comments area. Together they tell unintended recipients — before they read anything else — that the fax may contain PHI and what they must do if they received it in error.

The notice itself is generic boilerplate adapted from widely published healthcare confidentiality wording. It names HIPAA but does not claim certification. We strongly recommend replacing it with the wording your compliance officer or legal counsel has approved for your practice — especially in states with their own confidentiality-statute requirements (California CMIA, Texas HB 300, New York, etc.).

We picked four designs out of our six-design library that read conservative and trustworthy in a clinical setting: Onyx (newsroom-modern, bold), Sage (calm muted-green), Indigo (deep-navy formal letterhead), and Slate (architectural title-block). The Marigold and Sienna designs from the standard collection are visually too colorful or decorative for a medical context.

All four are AcroForm-fillable PDFs (universally supported in Acrobat, Preview, Chrome, Firefox) plus editable Microsoft Word .dotx files (open in Word, Google Docs, or LibreOffice). Free, no signup, no email, no watermark.

How to use

Verify the number, fill, send, confirm.

  1. Call the receiving office to verify the destination fax number and that someone is on hand to retrieve the fax. Misdirected PHI faxes are a common HIPAA breach scenario.
  2. Open the PDF in any modern reader, or open the .dotx in Microsoft Word. Click into each field (Attention, From, Send Fax, Return Fax, Date, Pages, RE, CC) and type. Use minimum-necessary identifiers (e.g. patient initials or MRN in RE rather than full name).
  3. Tick the appropriate delivery checkbox and add any minimum-necessary context in the Comments block.
  4. Print and fax, or upload the saved PDF to a HIPAA-eligible e-fax service. For sensitive transmissions, confirm receipt by phone with the named recipient.
State-law tip: California (CMIA), Texas (HB 300), and New York have their own state-level confidentiality statutes that may require additional cover-sheet wording on top of HIPAA. The included notice is a starting point — adapt it to your jurisdiction.
Customize with your practice logo
HIPAA fax cover sheet generator
Upload your logo, fill in practice contact info, pick a design — get a customized PDF with the CONFIDENTIAL · PHI banner and confidentiality notice baked in. No signup, runs entirely in your browser.
Open HIPAA generator
Don't need the HIPAA notice?
Standard fax cover sheets
Six designs in two formats and two title wordings (FAX / FACSIMILE) — for everyday business sends.
Browse standard collection

Frequently asked questions

Are these HIPAA-certified fax cover sheets?
There is no formal "HIPAA certification" for documents — HHS does not certify, approve, or endorse any specific fax cover sheet template. These are free templates that include a standard PHI confidentiality notice and fields commonly used in medical contexts. Whether your overall fax workflow meets HIPAA depends on your organization's administrative, physical, and technical safeguards, not on the cover sheet alone.
Does HIPAA require a fax cover sheet?
HIPAA's Privacy Rule and Security Rule do not mandate a specific cover-sheet format. They do require covered entities and business associates to take reasonable safeguards to protect Protected Health Information (PHI) in transit, including faxes. Most healthcare offices use a cover sheet with a confidentiality notice as one of those safeguards, alongside verifying the destination fax number, restricting access to the receiving fax machine, and confirming receipt with the recipient.
What does the confidentiality notice on these templates say?
Every HIPAA template includes a pre-printed notice telling unintended recipients that the fax may contain confidential or privileged information protected by federal and state law (including HIPAA where applicable), that they must not read, copy, distribute, or disclose any part of it, and that they should notify the sender immediately by phone and destroy the transmission. Have your compliance officer or legal counsel review the wording and adapt it to your practice before adopting it.
Is Apollo's Templates a HIPAA Business Associate?
No. Apollo's Templates provides downloadable templates as a tool. We do not access, store, transmit, or process Protected Health Information on your behalf — every field on these templates is filled in inside your own browser or copy of Microsoft Word, on your own computer, and the completed file never reaches our servers. We do not enter into Business Associate Agreements.
Do you handle or see the PHI I type into the fillable fields?
No. The fillable PDFs are AcroForm files that store typed values inside the local copy of the PDF on your computer. The Microsoft Word .dotx templates work the same way — anything you type stays in your saved .docx on your machine. Apollo's Templates does not have access to anything you fill into the cover sheet. See our Privacy Policy for the full picture.
Can I customize the confidentiality notice for my organization?
Yes — and you should. The Word .dotx version is editable end to end: open it in Word, click into the notice paragraph, and rewrite it to match the wording your compliance officer or legal counsel has approved for your practice. State laws in some jurisdictions add specific phrasing requirements on top of HIPAA; the included boilerplate is a generic starting point, not a substitute for advice tailored to your situation.
Can I add a patient name or MRN field?
Yes, in the Word version. The included fields (ATTENTION, FROM, SEND FAX, RETURN FAX, DATE, PAGES, RE, CC) are intentionally generic so the same template works for any healthcare context. Many practices put the patient identifier (initials or MRN — minimum necessary under HIPAA) in the RE / Subject line. If you want a dedicated MRN row, edit the field grid in the .dotx — every cell is a normal Word table cell.
What if I send a HIPAA fax to the wrong number?
Misdirected faxes are a common HIPAA breach scenario. Best practice: contact the unintended recipient immediately and ask them to destroy the fax (the confidentiality notice on the cover sheet primes them to do this), document what happened, and follow your organization's breach-notification procedure. Whether the incident requires a notification under the HIPAA Breach Notification Rule depends on a four-factor risk assessment — consult your compliance officer.
Is faxing PHI HIPAA-compliant in general?
Yes, when reasonable safeguards are in place. HIPAA permits transmitting PHI by fax as long as the covered entity verifies the recipient's number, restricts access to the receiving machine, takes reasonable steps to ensure the fax reaches only the intended recipient, and includes a confidentiality notice. Many practices also confirm receipt by phone for sensitive sends.
Why only four designs (not all six like the standard collection)?
We picked the four that read conservative and trustworthy in a clinical setting: Onyx (newsroom-modern), Sage (calming), Indigo (formal letterhead), and Slate (architectural). The Marigold and Sienna designs from the standard collection are visually too colorful or decorative for a medical context. If you'd prefer either of those with a confidentiality notice, you can download the standard version and paste your firm's notice into the comments block.
Updated through May 2026