Recurring patient statements
Statement cycles with patient-specific balances, payment messaging, and provider details.
- ✓Variable data statement printing
- ✓Multi-page statement sets
- ✓Statement inserts and notices
Healthcare Print & Mail · HIPAA-Compliant Handling · Est. 1989
HIPAA Patient Statement Printing & Mailing
Secure recurring statement mail for billing teams that need protected data intake, variable print, inserting, presort, postage coordination, and USPS handoff from one accountable partner.
- HIPAA-compliant handling
- SOC 2 Type 2
- BAA before any PHI
- USPS BMEU entry on our permit
- 100+ 5-Star Reviews
35+Years since 1989
100+5-star reviews
50States served
Start here
Start with volume, cadence and compliance needs.
Name and work email are enough to start. Do not send PHI with an initial quote request. We set up the secure transfer first, then move data under your BAA.
What you get back
- ✓Printing, mail services and postage, each on its own line. Postage is billed at the USPS amount, never marked up.
- ✓Record count reconciliation (mailed plus suppressed equals your file), the USPS postage statement, mail-date confirmation, and returned-mail handling with address updates carried into the next cycle.
- ✓SOC 2 Type 2 report available under NDA. Business Associate Agreement executed before any PHI moves.
Prefer to talk it through? Call (863) 687-6945.
The short answer
Who handles HIPAA-compliant patient statement printing and mailing?
Mail Processing Associates (MPA) prints and mails patient statements, explanation of benefits (EOBs) and medical invoices for billing teams, revenue cycle firms and health systems in all 50 states, from one facility in Lakeland, Florida. You send the statement data under a signed Business Associate Agreement. Our team processes the file, composes and prints the documents, inserts them with read-and-match verification, presorts them, enters the mail with USPS on our own permit, and returns the postage statement and mail-date report every cycle. Protected health information is handled under SOC 2 Type 2 controls and HIPAA-compliant procedures from intake through secure destruction. Every program is priced in an itemized written quote that separates printing, mail services and postage.
In plain terms: send us your statement file and we handle the rest. The sections below give the program specifications, the six steps of a monthly cycle, the postage basis by mail class, the facts you can verify before you call, and answers to the questions billing teams ask before moving a program.
Patient statement programs
Statement mailing without the vendor risk.
Three kinds of work run on the same secure program.
Secure print and mail operations
Secure intake, production checks, inserting and presort run inside one facility in Lakeland, Florida.
- ✓BAA-ready healthcare workflow
- ✓File review and production checks
- ✓Presort and postage coordination
Healthcare mail beyond statements
Use the same secure operational base for EOBs, compliance notices, appointment reminders, and billing inserts.
- ✓EOB and regulatory mailings
- ✓Appointment and recall notices
- ✓Selective inserting by patient segment
Specifications
Patient statement program specifications.
The specifications a billing or procurement team needs to compare vendors, in one table. Anything not listed is quoted per job.
| Specification | What MPA runs |
|---|---|
| Data files accepted | Fixed-width text, CSV, XML, or a print stream (PCL, PostScript, AFP) from your billing platform, EHR or CRM. Delivered over SFTP or an encrypted upload link. A scheduled connection from your system can replace manual exports. |
| Documents | Patient statements, medical invoices, EOBs, payment-plan and balance letters, compliance notices, appointment and recall reminders. One page to multi-page sets per patient, simplex or duplex, full color or black. |
| Envelopes and inserts | #10 window or closed-face outer envelopes, #9 return envelopes, perforated remittance slips, static inserts, and selective inserts by patient segment. Read-and-match inserting on every statement. |
| Mail classes | First-Class Mail presort for statements, invoices and any piece carrying account information (USPS rules keep bills and statements out of Marketing Mail). USPS Marketing Mail letters for non-statement patient communications such as recall campaigns. Nonprofit Marketing Mail letters for eligible nonprofit organizations. |
| Minimums | Print-only work starts at 250 pieces. First-Class presort postage applies to mailings of 500 or more pieces; smaller cycles mail at single-piece First-Class rates. Marketing Mail letters require 200 or more pieces. |
| Address quality | CASS validation and NCOA move update every cycle, duplicate and suppression handling, and an exceptions report returned before anything prints. |
| Process | The six steps below, the same every cycle. The cycle calendar is set from your billing close date and your target in-home date. |
| Reporting | Record count reconciliation (mailed plus suppressed equals your file), the USPS postage statement, mail-date confirmation, and returned-mail handling with address updates carried into the next cycle. |
| Data handling | Encrypted transfer and storage, access limited to trained authorized staff and logged, secure destruction after the retention period in your agreement. SOC 2 Type 2 report available under NDA. Business Associate Agreement executed before any PHI moves. |
| Pricing | An itemized written quote that separates printing, mail services and postage. Postage is billed at the USPS amount, never marked up. |
The monthly cycle
How a monthly statement program runs.
Six steps, the same every cycle. Each one names what you send and what MPA returns, so your revenue cycle team always knows where a batch is.
From data file to delivered mail
- ✓1. Secure data intake. You send the statement data file over SFTP or the encrypted upload link, or a scheduled connection from your billing system delivers it. MPA returns a receipt confirming the record count.
- ✓2. Data processing. You send any suppression or e-delivery opt-out flags, in the file or as a separate list. MPA runs CASS validation, the NCOA move update and duplicate checks, and returns an exceptions report listing undeliverable, duplicate and suppressed records.
- ✓3. Proof. MPA returns a proof built from a sample of real records so you approve the actual variable output, not just a layout. You send approval or corrections.
- ✓4. Print and insert. You send nothing further. Statements print in-house, and each set is matched to its envelope, remittance slip and inserts with barcoded read-and-match verification. MPA returns production QA confirmation.
- ✓5. Presort and USPS entry. Pieces are presorted to the qualifying tier and entered at the Lakeland Business Mail Entry Unit on MPA's own permit, so no consolidator holds your mail. MPA returns the USPS postage statement and the mail date.
- ✓6. Reporting and reorder. MPA returns the cycle report (counts reconciled, postage, mail date, returns), returned-mail address updates, and the calendar for the next cycle. You send the next billing close date. Source data is securely destroyed after the retention period in your agreement.
Postage basis
What the postage costs, by mail class.
USPS postage passes through at the USPS amount. Every program quote lists it as its own line, separate from printing and mail services. The rates below are per USPS Notice 123 effective July 12, 2026, at the Mixed presort tier, the highest automation price, so each figure is a ceiling; denser sorts run less.
| Mail class | Use on a statement program | Postage per piece |
|---|---|---|
| First-Class Mail presort letter, 1 ounce | Patient statements, invoices, balance letters, and any piece carrying account information. | $0.707 (Mixed tier) |
| USPS Marketing Mail letter | Non-statement patient communications: recall campaigns, wellness reminders, new-service announcements. | $0.467 (Mixed tier) |
| Nonprofit Marketing Mail letter | Non-statement mail for eligible nonprofit organizations holding USPS nonprofit authorization. | $0.257 (Mixed tier) |
Presorted First-Class letters pay one price up to 3.5 ounces; heavier pieces, flat-size pieces, and any cycle under 500 pieces are quoted per job. Marketing Mail flats are quoted per job. Printing and mail services are priced in the itemized quote; the postage line is the USPS figure.
Verify it
Facts you can check before you call.
A security review or a procurement file should not have to take our word for it. Each item below points at a record you can open.
The record behind each claim
- ✓SOC 2 Type 2. Controls observed operating over an audit period, Vanta-managed and audited annually. Report available under NDA through the MPA Trust Center.
- ✓HIPAA-compliant handling. Protected health information handled under documented safeguards, with a Business Associate Agreement in place first. Policies summarized at the Trust Center.
- ✓USPS Business Mail Entry. We present our own mail on our permit at the Lakeland Business Mail Entry Unit, so no consolidator is accumulating a truckload before your mail moves.
- ✓Florida public entities. MPA is an awarded contractor under Florida State Term Contract 80141800-25-STC, Mail Processing. The public record is linked on our government print and mail page.
- ✓Since 1989. One production facility in Lakeland, Florida, serving all 50 states.
- ✓5.0 stars across 100+ verified Google reviews.
- ✓Veteran-Owned Small Business.
HIPAA, BAA, and compliance
Built around the rules that govern protected health information.
Patient statements contain PHI, so the vendor that prints and mails them is a HIPAA business associate. MPA is built to hold that role, with the audit report, the agreement, and the controls a healthcare security review expects.
HIPAA compliant
MPA is HIPAA-compliant for protected health information handling. Workforce training, access logging, encryption in transit and at rest, and a documented incident response plan are part of the baseline, not add-ons.
Business Associate Agreement
MPA executes a Business Associate Agreement (BAA) before any PHI is exchanged. Our BAA template is built to clear vendor review quickly and is one of the two documents most security teams ask for.
SOC 2 Type 2
MPA is SOC 2 Type 2 certified, with controls observed operating over an audit period rather than designed on paper. The report is available for your security review under NDA.
Secure data handling
Your PHI stays inside one accountable workflow.
The single biggest risk in outsourced statement mail is a file changing hands too many times. Because MPA runs the whole job in-house, the same audited control set covers your data end to end, with no third party in the chain.
How we protect patient data
- ✓Encrypted transfer in and out, with secure SFTP or an approved encrypted gateway for every file.
- ✓Access limited to trained, authorized members of our team, with access events logged.
- ✓Encryption of PHI in transit and at rest across the workflow.
- ✓No subcontracting of your job to an outside vendor. Production stays under one roof with named operators.
- ✓Documented retention and secure destruction of source data after the period set in your agreement.
- ✓A documented incident response plan, so an issue has a defined path rather than an improvised one.
How it differs
Patient statements are transactional mail, not marketing mail.
The distinction matters because it changes the controls, the postage class, and the vendor you should use. Patient statements are transactional documents tied to a billing event, so they carry PHI and travel on a deadline.
Transactional statement mail vs marketing mail
- ✓Data sensitivity. Statements contain PHI and patient balances, so they require HIPAA controls and a BAA. A marketing piece mailed to a purchased prospect list does not.
- ✓Time value. A statement has a billing date and a due date, and USPS rules require bills and statements to travel First-Class Mail, which also lands them on schedule. Marketing pieces can ride a slower class.
- ✓Accuracy bar. Each statement must reach exactly the right patient with the right balance, which is why read-and-match verification is standard on this work.
- ✓Cadence. Statements recur on a billing cycle, so the program runs on a standing calendar instead of one-off campaign dates.
Cadence and volume
Sized for daily cycles or one-time projects.
The cycle is built around your billing calendar, and the quote is built around your volume, from a small specialty practice to a health system.
What to expect
- ✓Cadence. Daily, weekly, bi-weekly, monthly, or one-time runs, scheduled around your billing close.
- ✓Calendar. Each cycle is planned backward from your target in-home date, and every one of the six steps has a named handoff, so your team can see where a batch is at any point.
- ✓First cycle. The first run carries the setup work: the BAA and the SOC 2 Type 2 report for your security review, the secure connection to your billing system, data mapping, and proof approval. Every cycle after it is routine.
- ✓Volume range. From cycles of a few hundred statements to recurring mailings into the hundreds of thousands of pieces per cycle.
Managed connectivity
We connect to your EHR, CRM, or billing system and run statements for you.
You do not have to manually export a file every cycle. As a managed service, MPA connects to your billing system, electronic health record (EHR), or CRM and runs automated, triggered patient statements on your schedule, with our team operating the workflow end to end.
How the connection works
- ✓We establish a secure, recurring data feed from your billing platform, EHR, or CRM under your BAA.
- ✓Statement cycles run on a schedule or are triggered by events in your system, such as a billing close or a new balance.
- ✓Our team maps your data to the statement template once, then runs each cycle for you with the same controls every time.
- ✓You stay in control of approvals and suppression rules; we operate the production and mailing.
A managed service, run by our team
A scheduled run pulls the statement file at your billing close; a triggered run fires when a balance posts or a payment plan changes. Either way, our team operates the feed, the production, and the mailing.
If your statements live in a practice management system, a hospital billing platform, or a CRM, our team will scope the connection during onboarding and confirm the secure transfer method before any PHI moves.
For the broader transactional and recurring document program, see our statement printing service and healthcare print and mail overview.
Why a specialized vendor
A consumer print shop is not a healthcare statement vendor.
Patient statements are not flyers. They carry PHI, they run on a billing cadence, and a mistake is a compliance event, not a reprint.
What general print and mail shops miss
- ✓No Business Associate Agreement, so they cannot legally handle PHI for a covered entity.
- ✓No audited security program, so a security review stalls before the work can start.
- ✓Files passed between a printer, a separate mail house, and a delivery service, multiplying the points where PHI can be exposed.
- ✓No read-and-match verification, so a patient can receive another patient's statement.
- ✓One-off pricing and no recurring cadence, when statements need to run like clockwork.
What MPA does instead
- ✓A signed BAA and a SOC 2 Type 2 report your security team can verify under NDA, before any PHI is exchanged.
- ✓One in-house workflow with read-and-match inserting, so PHI never leaves a single accountable team and no patient receives another patient's pages.
- ✓Recurring program pricing in an itemized quote: printing, mail services and postage on separate lines.
Who we run statements for
Built for the teams that own patient billing mail.
Three kinds of organizations run statement programs with MPA.
Multi-practice and specialty groups
Multi-location medical groups and specialty practices that need consistent, compliant patient statements across every site without standing up an in-house mail operation.
Hospital and health systems
Healthcare networks and hospital billing teams running high-volume statement and EOB cycles that have to clear a formal security review before a vendor is approved.
Billing companies and RCM firms
Revenue cycle management firms and third-party administrators that produce statements on behalf of their own clients and need a BAA-backed print and mail partner behind them.
Accuracy and quality controls
The controls that keep the wrong statement out of the wrong envelope.
Five controls keep each patient's pages in that patient's envelope, every cycle.
How accuracy is enforced
- ✓Record count reconciliation. Counts are confirmed on intake and again at mail, so mailed plus suppressed reconciles to your file total.
- ✓Address standardization and verification. Addresses are standardized and verified before composition to keep deliverability high and returns low.
- ✓Proof sign-off on real records. Your team approves a proof built from real records before the batch prints.
- ✓Read-and-match inserting. Barcoded read-and-match confirms each patient receives their own pages and only their own pages.
- ✓Suppression versioning. Suppression and opt-out lists are versioned so any past cycle can be audited later.
What we need from you
Data file and template requirements.
You do not have to format your data perfectly. Send what your billing system produces, and our team maps it. Here is what makes the first cycle fastest.
To get a program running
- ✓Your statement data. Fixed-width text, CSV, XML, or a direct print stream (such as PCL, PostScript, or AFP) from your billing platform.
- ✓A statement template or sample. Your current statement layout, or a sample of what patients receive today, so we can match or improve it.
- ✓Insert and envelope needs. Return envelopes, remittance slips, payment-plan flyers, or regulatory notices that ride along with the statement.
- ✓Suppression rules. Any e-delivery opt-outs or do-not-mail flags, sent in the data file or as a separate list, so paper is suppressed for those patients where the program allows it.
- ✓Cadence and timing. Your billing close schedule and the in-home window you want, so the cycle calendar is built around your due dates.
Do not send PHI with an initial quote request. We set up the secure transfer first, then move data under your BAA.
Healthcare statement FAQ
Questions billing and revenue cycle teams ask.
The questions billing and revenue cycle teams ask when they compare a statement vendor, each answered with the next step.
Our patient statements cost too much to mail in-house. How do organizations cut the postage?
Four levers move the postage line. Presort automation: a letter presorted to the Mixed tier costs $0.707 at July 12, 2026 rates instead of the metered single-piece price, and the mail house sorts it and enters it at a Business Mail Entry Unit on its own permit, which removes the meter and the trips to the post office. Address quality: CASS validation and an NCOA move update every cycle cut returned mail, which is postage paid twice. Weight and size: a presorted commercial letter pays one price up to 3.5 ounces, so a multi-page statement with a remittance slip and return envelope usually stays at the letter rate; keep the piece within letter dimensions, 6.125 by 11.5 inches, so it is not priced as a flat. Suppression: patients on e-delivery are removed before print. Next step: send a sample file and we return an itemized quote showing the postage line at the USPS amount.
Our clinic prints and mails patient statements ourselves. Is outsourcing cheaper?
Compare the whole cost, not the postage alone. In-house, the statement run carries staff time, printer and inserter maintenance, toner, envelopes, returned mail, and postage at the metered rate. A program vendor presorts to the automation rate, so the postage line usually drops, and the labor line moves off your payroll. The honest answer depends on your volume and how many hours your billing staff spend on the run each month. Our quote separates printing, mail services and postage so you can put it next to your internal cost line by line. Next step: request the quote with your monthly volume and cadence.
Presort mail service versus running our own postage meter: what is the difference?
A postage meter prints single-piece First-Class postage on each envelope; a metered 1-ounce letter is $0.78 at July 12, 2026 rates. A presort service sorts the mail by ZIP code into USPS trays, applies an Intelligent Mail barcode, prepares the postage statement, and enters the mail at a Business Mail Entry Unit on its permit. The same letter presorted at the Mixed automation tier is $0.707, a saving of about 7 cents per piece before the labor you no longer spend feeding a meter and driving to the post office. Presort requires 500 or more pieces per mailing and CASS-validated addresses. Next step: tell us your monthly count and we confirm which tier your list qualifies for.
What compliance rules apply to statement mailing: HIPAA, TCPA, anything else?
HIPAA governs the protected health information on a patient statement: the vendor is a business associate, signs a BAA, and applies the minimum-necessary standard and documented safeguards. TCPA governs calls and text messages, not mailed statements. Collection-stage letters sent by a third-party collector fall under the FDCPA and state notice rules. USPS rules require bills and statements to travel First-Class Mail, never Marketing Mail. MPA handles the mail side of those rules; your compliance counsel owns the content of the notice. Next step: share the statement or notice text and we confirm the mail class and handling before the first cycle.
Do you offer an outsourced invoice and statement printing and mailing service outside healthcare?
Yes. The same program runs invoices, statements and notices for utilities, property managers, municipal billing, associations, and professional firms. The steps are identical: secure intake, CASS and NCOA processing, proof, print and insert, presort and USPS entry, and a cycle report. The PHI controls on this page become PII controls for account data, under the same SOC 2 Type 2 program. See our statement printing and mailing service for the non-healthcare program. Next step: send a sample statement and your monthly count for an itemized quote.
Is there a statement printing and mailing company in Florida?
Mail Processing Associates runs statement programs from one production facility in Lakeland, Florida, for practices, health systems and billing firms across the state and in the other 49 states. Florida public entities can buy the work under State Term Contract 80141800-25-STC, Mail Processing. Mail enters USPS at the Lakeland Business Mail Entry Unit on our permit. Next step: request a quote with your volume and cadence, or call 863-687-6945.
Ready to scope it?
Back to Quote Form
Start with the quote form above.
The fastest next step is the quote form above: project type, volume, cadence, compliance requirements, timeline, and notes. No PHI needed.