GDPR compliance

Fax transmission

Zetafax uses the international T.30 fax standard for transmitting faxes. The fax call is point-to-point, with a similar level of security to a voice call, and is not encrypted.

Companies transmitting sensitive information should ensure that the fax number for the recipient is correct – eg by using fax numbers stored in a central address list rather than entering these manually when sending, and by confirming receipt of a test fax before using a number for sensitive information.

Fax over IP (FoIP)

Fax over IP is an international standard for transmitting fax data over an IP switched network. The standard allows use over private and public networks, including the public Internet.

The Zetafax FoIP Connector is used for communication between the Zetafax Server and an IP phone system or FoIP gateway unit. It is an alternative to using a dedicated fax board, and is typically used by companies using IP phone systems or running the Zetafax Server on VMware or other virtual server environment.

Fax over IP traffic generated by Zetafax is not encrypted, and should therefore only be used over secure internal networks. Companies who are concerned about using unencrypted network traffic of this type should use a dedicated fax board instead.

Data storage

Zetafax stores faxes as standard TIFF format files. These are store in folders which typically reside on network fileservers.

Zetafax uses network security to protect access to these files. The Enhanced Security feature enables adminstrators to apply network security to these folders simply, so that each user can only see faxes which they have submitted, and are unable to see temporary files created by the server when transmitting a fax.

Zetafax can be configured to store transmitted files in a long term central archive and/or a Sent Items folder for each user. The server can also be configured to delete old data automatically.

We recommend that companies sending sensitive information apply the Enhanced Security settings, ensure that use of network accounts which allow access to the Zetafax data folders are properly controlled, and consider disabling archiving or configuring automatic deletion rules to limit the amount of information which is stored after transmission.