Concord Fax Review 2026: Pricing, Security & How It Compares

Is Concord Fax Worth It in 2026?

Concord Technologies has sold fax and document-exchange technology out of Seattle since 1996, which puts it in the same multi-decade bracket as OpenText's RightFax rather than the newer cloud-native names in this series. The pitch is a HIPAA-first cloud fax platform with genuine integration depth: a public developer portal, EHR/EMR document workflows, MFP and Print2Fax support, and a security stack (SOC 2 Type II, PCI self-certification, AES-256 encryption, and active-active datacenters) that Concord documents in greater technical detail than several competing vendors.

The complication is what happens once a buyer looks past the entry-level FaxPro plans. Those three tiers ($10.95, $14.95, $49.95 per month) are genuinely self-serve, with a real per-page allowance and a posted overage rate. But Concord's own Enterprise page routes a prospective larger buyer to a "Build a Quote" tool and a sales conversation rather than a published enterprise rate card, so the transparent pricing that makes the FaxPro tiers easy to evaluate does not extend to the deployment size Concord's own marketing spends the most time talking about.

The Biscom Acquisition

In January 2024, Concord Technologies acquired Biscom, a competing healthcare document-exchange and secure fax vendor, from investment firms ParkerGate and Eldridge. Ten months later, in November 2024, Concord acquired Opero, a top-rated Salesforce AppExchange developer of fax, document-generation, and e-signature apps, folding it in as "Opero Apps powered by Concord Technologies." That makes Biscom and Opero two additional fax-adjacent brands under the Concord umbrella in under a year. This is a shape this series has already documented elsewhere (Documo/mFax, SRFax/eFax): several products, one owner, and a buyer researching any of the three names should confirm which brand a specific quote, integration, or support path actually refers to before assuming they're interchangeable.

When to Look Elsewhere

Organizations that want HIPAA-capable faxing and comparable integration depth with fully transparent pricing at every tier have modern enterprise alternatives. Fax.Plus combines published pricing, cloud-native administration, native mobile and desktop apps, API-driven workflows, and AI and agent automation. OpenText serves organizations that require traditional on-premises or hybrid fax infrastructure, while RingCentral fits teams already purchasing a broader UCaaS platform. Concord still makes sense for healthcare and enterprise buyers that specifically want its integration ecosystem or are comfortable with a sales-assisted procurement process.

‍

About Concord Fax

Concord Technologies is a privately held company headquartered in Seattle, Washington, founded in 1996. Its core product, Concord Fax (marketed as Concord Cloud Fax), targets healthcare and enterprise document workflows, with a security and compliance story built around HIPAA-covered faxing rather than general-purpose consumer sending.

Concord Fax supports a web dashboard, email-to-fax, fax-to-email delivery, MFP integration, the Print2Fax Windows print driver, and a file-drop method, aimed at fitting into whatever workflow a healthcare or enterprise back office already uses rather than requiring a dedicated app.

Concord by the Numbers

Concord's own marketing pages state 99.99% uptime, a Net Promoter Score of 84, and a customer retention rate it lists as 99% on its homepage and 97% on its FaxPro Enterprise pricing page. That's a small inconsistency between two of Concord's own pages, not a figure we resolved to one number. Independent third-party corroboration exists for scale: IDC's 2024 MarketScape assessment puts Concord at approximately 4,500 customers transmitting roughly 5 billion fax pages annually, a figure broadly in line with, though not identical to, what Concord states on its own demo/scheduling pages. Treat the exact page-volume and retention figures as directionally accurate rather than precise to the decimal.

This review is based on publicly available Concord Technologies materials and reputable third-party sources as of July 2026, with no hands-on product or fax-quality test performed. Pricing, certifications, and product details can change; we will update the article if new information becomes available or anything needs correction.

Tarifs

Unlike several enterprise-positioned fax vendors in this series, Concord actually publishes real numbers for its entry tiers.

The FaxPro Plans

• FaxPro 100: $10.95/month. Up to 100 pages/month (50 inbound + 50 outbound included), 3 sending email addresses, 1 included toll-free line, additional pages at $0.07/page, BAA upon request.
• FaxPro 300: $14.95/month. Up to 300 pages/month (150 inbound + 150 outbound included), 3 sending email addresses, 1 included toll-free line, additional pages at $0.07/page, BAA upon request.
• FaxPro 1000: $49.95/month. Up to 1,000 pages/month (inbound or outbound), 20 sending email addresses, a direct inward dial (DID) number included (toll-free carries a $2 surcharge), additional pages at $0.07/page, BAA upon request.

Concord's own healthcare-focused rate card (Concord Rates, domestic US/Canada) lists a similar per-page structure: 50 free inbound pages then $0.08/page, 50 free outbound pages then $0.07/page, at $10.95/month. That's consistent with the FaxPro 100 tier rather than a separate pricing model.

Past the Entry Tiers

For volume beyond FaxPro 1000, or for the enterprise, multi-tenant, and system-integration scenarios Concord's own marketing spends the most time describing, the path is a "Build a Quote" tool that leads into a sales conversation rather than a posted rate card. That is the same buying-process friction this series has documented at other enterprise vendors: the entry tiers are genuinely self-serve and transparent, but the deployment size Concord positions itself for is not priced anywhere a prospective buyer can check in advance.

One third-party comparison source cites a Concord "Essentials" plan at roughly $399/month. That figure does not appear anywhere on Concord's own pricing pages we reviewed and should be treated as unconfirmed rather than a current, sourced rate.

How Enterprise Pricing Compares

‍

Concord itself has no row here because it has no published enterprise price to compare: past FaxPro 1000, it's the same "Build a Quote" path as OpenText Fax and OpenText Core Fax. RingCentral, Fax.Plus, and Documo all keep a number posted even at this tier.

Sécurité et conformité

The Certifications in Plain Language

• HIPAA: the US law governing patient health information.
• BAA (Business Associate Agreement): the signed contract that makes a vendor legally responsible for protecting that information under HIPAA. Organizations generally need an appropriate BAA in place before letting a cloud fax provider handle protected health information on their behalf.
• SOC 2: an independent auditor checked the company's security controls and confirmed they operate as claimed, not just on paper.
• PCI: covers the safe handling of payment card data.
• HITRUST: a healthcare-focused security certification that bundles HIPAA and other frameworks into one standard an outside assessor can certify against. A common trust shortcut for hospital procurement.
• ISO/IEC 27001: the international standard for running an information-security program at the organizational level.

What Concord Documents

Per Concord's dedicated Security & Compliance page and its FaxPro pricing pages, the company states:

• Meets HIPAA requirements, with a "Standard BAA Upon Request" on every FaxPro plan
• HITRUST Certified
• SOC 2 Type II Compliant
• PCI Self-Certified. Concord's own page specifies this is a self-certification (a self-assessment, not an independent QSA audit), a meaningfully lighter bar than a third-party-audited PCI certification
• DirectTrust Alliance member (a healthcare interoperability trust framework)
• AES-256 encryption at rest, with SSL/TLS-protected data in transit for web traffic and TLS or Secure HTTP for fax traffic, plus active intrusion protection
• Physical security: private, guarded datacenter suites with controlled badge access and closed-circuit monitoring
• Logical security: logged and recorded access, complex password requirements, and an enforced anti-virus policy

No ISO/IEC 27001 certification appears on Concord's dedicated Security & Compliance page, and no independent auditor is named for the SOC 2 report on any Concord-owned page we reviewed. For comparison, Fax.Plus names EY CertifyPoint as the auditor for both its ISO 27001 and SOC 2 Type II certifications, and its PCI DSS compliance is not a self-certification.

HIPAA et BAA

Concord's BAA is available on every FaxPro tier "upon request" rather than gated to a top plan, which is a genuine point in its favor next to vendors that reserve HIPAA entirely for an enterprise conversation. What Concord's public materials do not spell out is the mechanics of that request: whether it is a standard document signed on account setup, or something negotiated per contract. A healthcare buyer should get the specific BAA terms in writing during signup rather than assume them from the "upon request" wording alone.

Fax-to-Email and HIPAA Considerations

One nuance worth checking with any healthcare fax vendor is how email-based workflows handle protected health information. Standard email is not automatically suitable for PHI unless the required encryption, access controls, and transmission safeguards are in place.

Concord supports email-to-fax for sending and fax-to-email delivery for receiving. However, the public materials reviewed for this article do not clearly document the encryption and configuration requirements for using fax-to-email in a HIPAA workflow. Healthcare buyers should confirm how messages and attachments are protected in transit, whether a dedicated secure-delivery setup is required, and whether the workflow is covered by the BAA.

Fax.Plus documents this distinction more explicitly. Standard fax-to-email delivery is intended for non-PHI use, while HIPAA-compliant email workflows require the Enterprise plan, Advanced Security Controls, a signed BAA, and a dedicated TLS-enforced address. It is a relatively small workflow detail with significant compliance implications, and one worth confirming before patient information is sent or received through email.

Apps and Access

Concord Fax is accessed through a web dashboard, email-to-fax, fax-to-email delivery, MFP (multi-function printer) integration, the Print2Fax Windows print driver, and a file-drop method. It's a back-office-oriented surface list rather than a mobile-first one.

No native Concord Fax app was found on the Apple App Store or Google Play in the sources we checked, and Concord's own Cloud Fax Download Library lists Print2Fax and related desktop/print tools, not a mobile app. A third-party comparison site's claim that Concord ships "fully functional mobile apps for iOS and Android" is not corroborated by an actual app-store listing and should be treated with caution rather than repeated as fact.

How Access Compares

Fax.Plus pairs enterprise administration with native iOS and Android apps, desktop apps for Windows and macOS, a web app, email-to-fax, and MFP support, all reachable from a self-serve signup. Documo and RingCentral both ship at least one mobile app. On the current evidence, Concord's access story leans entirely on the desktop, web, email, and print-driver surfaces its healthcare and back-office customers already use: a reasonable fit for that specific buyer, and a real gap for anyone who expects to fax from a phone.

Support, Contracts, and Ownership Continuity

Concord positions account setup as fast ("in less than 10 minutes"), and support routes through a specialist-contact path ("Talk to a Specialist") alongside the standard self-serve signup for the FaxPro tiers. Unlike several enterprise-positioned vendors in this series, Concord does publish an actual SLA, though it's an old one: a Terms of Service document dated October 2013 that is still publicly available on Concord's website stated a 99.8% uptime commitment over any 30-day period with no single outage exceeding 12 continuous hours, plus specific delivery-time targets (inbound delivery within 5 minutes 99.5% of the time; outbound dialing within 5 minutes 99% of the time, within 15 minutes 99.8% of the time). Treat these figures as the last publicly posted SLA language, not confirmation that current enterprise contracts use the same terms. Ask Concord to confirm current SLA language before signing.

The same 2013 document also laid out a billing detail worth knowing: fax pages that took longer than 72 seconds to transmit incurred "Overtime Charges," billed in 6-second increments at one-tenth of the per-page rate. A graphic-heavy or dense page could cost more than the advertised per-page rate implies. On exit, the same document was relatively customer-friendly on numbers: DIDs and toll-free numbers were described as granted to the customer for exclusive use during the term, with ownership transferred to the customer on request when the agreement ends. That's a more favorable stance than the "customer of record" number-ownership traps documented at some other vendors in this series (see our HumbleFax and eFax reviews), though as with the SLA figures, confirm these terms are still current before relying on them.

The more distinctive consideration here is corporate continuity rather than day-to-day support. Concord Technologies is privately held and has private-equity backing through Excellere Partners. Reporting from 2024 to 2025 also described the company engaging Baird to explore a potential sale, a process that isn't confirmed as resolved as of this writing. Concord also acquired two competitors, Biscom and Opero, within the same year (January and November 2024). None of that is disqualifying; plenty of enterprise vendors have investors and pursue acquisitions. But a buyer signing a multi-year fax contract is reasonably entitled to ask where the company's ownership and roadmap stand before committing.

Résidence et conservation des données

Concord's public materials describe an active-active infrastructure model across multiple datacenters, positioned around delivery reliability during an outage rather than customer-selectable geography. We found no published customer-facing region-selection option in the sources reviewed. On retention, Concord's own IT/compliance-focused product page states that users can set their image retention policy to immediately remove sent images, a real, publicly stated control, though not a stated default retention window for faxes generally. Separately, Concord's Terms of Service commits to retaining billing/invoice records for 90 days on customer request, which is a billing-records policy, not a fax-content retention default. Neither source gives a single, clear answer to "how long is my fax content kept by default," so a buyer with a specific retention requirement should still confirm the exact number directly with Concord.

How Concord Data Residency Compares

Fax.Plus lets account admins choose among more than 20 regions worldwide, with separate storage for live data and backups and self-serve migration. Documo documents a US-and-Canada footprint with named subprocessors. Concord's public materials, by contrast, emphasize datacenter redundancy rather than customer-controlled residency or a stated retention default, the least specific data-residency disclosure of the vendors compared in this series so far.

Enterprise Automatisation des API et des soins de santé

The API and Developer Portal

Concord publishes a developer portal (developer.concordfax.com) with a documented API set for fax and document-automation integrations, sample code, and guides aimed at connecting Concord Fax into EHR systems and other applications. It's a genuine, ongoing investment in the integration story that matches its "seamless integration" pitch. We did not find published rate limits, throughput figures, or SDK languages in the sources reviewed; buyers planning a high-volume integration should confirm capacity directly with Concord.

Intégrations dans le secteur de la santé

Concord markets document integrations that let faxes be sent and received from inside an EHR or application interface, consistent with its healthcare-document-exchange positioning (reinforced by the January 2024 Biscom acquisition, itself a healthcare document-exchange vendor). We did not find a named, certified EHR connector (in the way Documo and Retarus name a certified Epic connector) in the materials reviewed. Concord's integration story reads as a general document-integration API rather than a named, pre-built EHR connector catalog. Buyers should confirm the specific integration mechanics for their own EHR during scoping.

AI and Agent Workflows

We found no MCP server or other agent-ready AI interface on Concord's public developer materials.

Fax.Plus covers this ground in two layers. Its MCP setup includes a developer-focused MCP server for accessing and working with its API documentation, the same kind of documentation-access layer some other vendors in this series offer. In addition, Fax.Plus provides a hosted operational endpoint at mcp.fax.plus that exposes more than 40 authorized, scoped tools to AI applications and agents. These tools carry out real fax operations, including sending faxes, retrieving received faxes, tracking delivery status, managing contacts, listing fax numbers, and configuring webhooks, so an authorized AI application or agent can actually send and manage faxes on a user's behalf, not just look up how the API works. Concord has neither layer publicly documented.

How Concord Enterprise Automation Compares

Concord's API and integration depth put it ahead of pure consumer-grade fax apps, and its healthcare-document-exchange heritage (strengthened by the Biscom acquisition) is a real asset for back-office integration work. The gap against a modern cloud-native platform is the same one seen elsewhere in this series: no published MCP or agent-ready layer, no named EHR-certification catalog to point to, and, for anything past the FaxPro tiers, no published price to compare it against.

Enterprise Alternatives to Concord Fax

The closest Concord Fax alternatives represent three different approaches to enterprise fax: a cloud-native platform with AI and agent automation, traditional on-premises or hybrid fax infrastructure, and fax bundled into a broader business communications suite.

Fax.Plus: Best cloud-native enterprise fax alternative

Fax.Plus is a modern enterprise fax platform for organizations that want healthcare compliance, API-driven workflows, and large-team administration without running fax infrastructure or entering a quote-only buying process. Pricing is published from the free tier through the Enterprise plan at $79.99/month, which includes unlimited users.

Enterprise capabilities include HIPAA workflows under a signed BAA, ISO 27001 and SOC 2 Type II certifications from a named auditor, EHR connectivity, Fax Streaming, native mobile and desktop apps, and data residency across more than 20 regions. Fax.Plus also adds an AI and agent layer that traditional enterprise fax platforms generally do not provide: AI Data Extraction and text transcription, a public API with SDKs, a developer-focused documentation MCP server, and a hosted operational MCP endpoint with more than 40 authorized tools for sending, retrieving, tracking, and managing faxes through AI applications and agents.

Best for: Organizations that want enterprise-grade fax capabilities comparable to Concord's in a cloud-native, AI-ready platform with transparent pricing and a more accessible, self-service buying and deployment path.

OpenText: Traditional enterprise fax infrastructure

OpenText sells enterprise fax through two separate products: OpenText Fax, the on-premises and hybrid server still widely known as RightFax, and OpenText Core Fax, its multi-tenant cloud platform. RightFax remains relevant for large organizations that require direct control over fax infrastructure or depend on long-established Epic, SAP, Oracle, and other back-office integrations.

Neither product publishes pricing, and both begin with a sales or reseller process. OpenText Fax also follows a traditional software lifecycle in which versions move out of full support after roughly five years unless the customer upgrades under an active support contract. OpenText provides established enterprise integration depth, but it is a procurement-led infrastructure choice rather than a self-service, AI-ready cloud fax platform.

Best for: Large organizations with a hard requirement for on-premises control, existing OpenText infrastructure, or legacy enterprise integrations that would be difficult to replace.

RingCentral: Enterprise fax inside a communications suite

RingCentral offers fax either as a standalone plan or as part of its broader phone and communications platform. Pricing is published, but the product makes the most sense for organizations already purchasing RingCentral for calling, messaging, and other UCaaS features. Contracts may involve multi-year terms and auto-renewal.

Best for: Teams that want faxing included in a business communications platform they already use.

Final Verdict

Concord Fax is a credible choice for healthcare and enterprise organizations that value HITRUST certification, BAA availability across the FaxPro plans, and established API-driven document workflows. Its published entry-tier pricing is unusually transparent for an enterprise-oriented fax provider, though larger deployments still require a sales conversation.

Fax.Plus is the better overall choice for most organizations looking for a cloud-native enterprise fax platform. It combines fully published pricing, healthcare compliance, native mobile and desktop apps, broader data-residency controls, API-driven workflows, and an AI and agent layer that includes data extraction, transcription, developer documentation access, and more than 40 authorized operational MCP tools. Concord remains a strong specialist option for healthcare buyers with an existing Concord or Biscom workflow, or those that prioritize HITRUST and entry-tier BAA availability.