The decryption occurs at the server side, all access to the fax image has to go through the RightFax API. The RightFax client access the server via the API, the server then decrypts the image and sends it back to the client. This ensures that any access to the fax image is tracked and are fully audit logged