Controlled Substances EPCS

Healthie has rolled out the EPCS integration with DoseSpot as an add-on to our Enterprise level provider plans, allowing clinicians to prescribe controlled substances electronically.

Enabling electronic prescribing of controlled substances (EPCS) is a multi-step process that requires an in-depth identity verification process with our partner at DoseSpot, using additional external third-party integration with Experian.

As of 3/31/2024, facial recognition is now part of identity verification for providers who have not yet completed IDP. Additionally, Two Factor Authentication needs to be enabled for your account, via DUO mobile (an app you will download to your mobile device). The timeline for this verification process can vary, but in some cases may take up to 2 weeks to complete.

If you would like to request EPCS, please email hello@gethealthie.com.

Cost for Enrolling in EPCS

There is a fee of $40/provider/month to enroll in E-Rx. EPCS permissions has an add-on fee of +$20/provider/month, and there is an additional approval process that will occur on your behalf.

There are no costs for adding Proxy roles to your account.

Note: If your organization needs to offboard any providers with E-Rx/EPCS access, please email hello@gethealthie.com to request that provider's e-Rx/EPCS add-on is removed from billing.

Enable E-Rx + EPCS for a Prescriber

There is an approval process from Healthie's integration partner, DoseSpot, in order to set up E-Rx within Healthie. Verification of your professional credentials will be required. In order to get started, please complete our E-Rx Application Form with your business & personal information, including your DEA number. If you are part of an organization, please check with your account admin to see if there is an E-Rx application unique to your team.

Once your application is received, it will be sent to DoseSpot for review and approval, which typically takes 24-48 hours. Our team will contact you to notify you of the status of that approval process.

After receiving approval from DoseSpot, there are additional identity proofing steps needed to become EPCS approved, which may take an additional 5+ business days. Providers will have access to prescribe non-controlled substances in the interim. However, the identify verification process could potentially take longer, depending if all information properly matches when Experian runs the check.

Required information for EPCS enrollment:

Standard information needed for E-Rx (Provider legal name, NPI number, date of birth, and clinic/organization contact information) )
An active fax number for the prescribing provider (can be the same as the organizations, but a fax line is required)
Mailing address for the prescribing provider (Experian may need to send a letter to the prescriber's mailing address as part of the identify verification process)
Mobile phone number (this will be added later, directly within Healthie, as part of Two Factor Authentication)
DEA number
Credit card number for credit history check (clinician will be prompted to provide these details directly during the Identity Verification Step in-product). This information is not stored, and Healthie does not store, access, or use the information in any way.
Social Security Number. This information is not stored, and Healthie does not store, access, or use the information in any way.
Driver's License.

Enrollment for EPCS entails three steps: License Agreement, Identity Verification Process (IDP), and Two Factor Authentication Set Up. We walk through these steps in detail below and will help guide you through the process.

During setup when clicking on Order and manage prescriptions from the Medications section of the Client Profile Overview, EPCS prescribers will see 3 forms appear which will need to be completed. Information requested from the provider will include a credit card, social security number, and driver's license.

There isn’t a workaround if a clinician does not have credit history, SSN, or adequate form of identification. This is a requirement from Experian who does the 3rd party identity verification step. Healthie and DoseSpot are unable to make adjustments to these criteria.

Start Enrollment + Accept License Agreements

When completing Healthie's E-Rx application, please indicate if you need EPCS permissions for a provider (or more than one provider). Once your application is received, our integration partner, DoseSpot, will initiate the Identity Proofing process (IDP).

Once E-Rx is enabled for your account, you will receive an email notification from the Healthie Support team. At this time, you will be prompted to accept a license agreement.

Log in to Healthie
Navigate to a client's profile
Scroll to the Medications section
Click the Order and manage prescriptions button
Accept the 3 agreements on the first screen (if you have not done so already)
Click on the exclamation point icon within that area and follow prompts from there.

Complete Identify Proofing

This verification step requires information from the provider including a credit card number, social security number, and driver's license (or acceptable ID alternative).

DoseSpot partners with Experian for identity proofing. Experian is a third-party consumer-credit reporting company that works with DoseSpot to confirm a user's identity. The compare the information provided with an individual's existing credit profile to confirm their identity. No information provided is saved by DoseSpot.

To initiate the Complete Identity Proofing:

Log in to Healthie
Navigate to a client's profile
Scroll to the Medications section
Click the Order and manage prescriptions button
Click on the exclamation point icon within that area and follow prompts from there.

To initiate IDP in the Enhanced UI:

Log in to Healthie
Navigate to a client's profile > Medications
Click the Order and Manage
In the Identify Proofing pop-up, click Begin Identity Proofing
An Identity Proofing side modal will appear, where you'll need to acknowledge the terms > click Next
Fill out your Prescriber Information > Next
After your information is verified, you'll receive a text message with a link to complete the IDP Facial Recognition Process
Open the link via text message and click Let's get started from your mobile device
Select the document that you'll use to verify your identity and follow the photo prompts
Once complete, return to DoseSpot and you'll see a green banner to indicate success

If you fail the Experian identity questions, you will have up to 3 attempts. After the third failure, you'll be directed to ID.me. You can access the ID.me user guide here.

Set up Two-Factor Authentication (TFA)

Once your identify has been verified (through IDP), Healthie will be notified and manually kick off Two-factor authentication (TFA), which is required in order to prescribe controlled substances. To enable TFA for EPCS, prescribers will need to activate a DUO Mobile account. There is an initial setup process for enabling DUO Mobile.

Note: if you required a letter from Experian to complete the IDP process, you will need to have that letter on-hand for your reference code in order to complete the setup process. If you were able to complete IDP through the One-Time Password (OTP) pathway, your reference code will automatically populate.

Setting up TFA in the Current UI:

Click the small circle with an exclamation mark inside of it near the top left of the page
In the pop-up, click on the blue text that reads "Please click here to Activate TFA Authentication for Controlled Substances"
Link your mobile phone number & agree to terms
- Allow permission to receive text messages from DUO Mobile. When prescribing a controlled substance, you will be prompted to verify your identity. You will open the DUO Mobile app and get a verification code. You will then enter this code to authenticate the prescription. This is a necessary step to prevent anyone besides yourself from prescribing a controlled substance.
- Your mobile number will be linked to your account and DUO Mobile. At this point, there are TWO text messages you should receive from Duo Mobile. One is the link to download the app, and the second is the link your Duo Mobile account with DoseSpot.
- When installing the DUO mobile app, please use the same mobile number you provided to Healthie.
Complete the Validation Process
- Once DoseSpot receives your request to prescribe controlled substances, a validation process will happen via Experian. Enter your reference number from the Experian letter (if applicable) as well as the TFA code from the Duo Mobile app. If you completed IDP without needing a letter from Experian, your reference number will pre-populate in the associated text box.
- Lastly, you'll need to enter a PIN (personal identification number) that you create. You should see a "Set Pin" option to create your new PIN. Please keep your PIN in a safe place as you will need it every time you wish to process a prescription for a controlled substance. You'll use the same PIN every time you place an order for a controlled substance, but will need a unique TFA Code.

See the attached guide for more info: DoseSpot Facial Recognition Guide.

Setting up TFA in the Enhanced UI:

If you required a verification letter, once you have that, follow these steps:

Navigate to the Client's Profile > Medications > Order and manage prescriptions
Click on the Notifications (bell) icon in the top right > Complete TFA Activation
Enter the mobile number you will use for the DUO app > Send Me Duo Activation Texts
You'll receive two text messages from DUO Mobile: one to download the mobile app and the other to use DUO Mobile with the DoseSpot application
Install the DUO Mobile app if you have no already done so
Click the link in the second text message - you'll be prompted to name your account > Next
You can click Practice Now to view a tutorial, or Skip if you don't need to view it
From DoseSpot, you'll see a TFA Authentication pop-up to active your mobile app. Enter the 6-digit code generated by the DUO mobile app as the Passcode, and your Pin Number
Click Submit

DoseSpot will now be listed in the DUO Mobile app. The six-digit number is the TFA code. The Refresh Passcode button will generate a new code. A new code is needed every time a TFA code is required in the DoseSpot application.

For more information and troubleshooting, view the IDP With Facial Recognition guide.

Prescribing Controlled Substances in the Current UI

Prescribing controlled substances within Healthie functions the same as prescribing other medications, with an added TFA step.

You will need to have the DUO Mobile app installed on your smartphone (see the steps outlined above).

To begin, click on the Add Prescription button.
Fill out all of the necessary information including prescription type, name, form, strength, pharmacy, etc.
Select a DEA Number (DoseSpot will automatically select the DEA number that most closely matches the pharmacy address).
Choose the effective date. This will be the day the patient can pick up the prescription.
Add directions, dispense amount, how many refills will be allowed and the days’ supply.
To add pharmacy notes, click the + next to Show Pharmacy Notes. You can select from the list of provided 'common notes' or enter custom notes as needed.
Select No Substitutions IF you do not want the pharmacy to look for other options such as generic versions of the selected drug.
Choose whether or not the prescription is Urgent or not.
If this is a commonly used prescription, you can select Save As Favorite. This will make it easier to select the same prescription later.
Click Save Prescription. The medication will be added to your Pending Medications list.
Once in your Pending Medications, you can review the medication before sending. when ready, select the medication from the list and click Approve and Send.
You will be prompted to review the controlled substance details again. After verifying the information, select the Ready to Sign checkbox.
To send the controlled substance, you will be asked to provide your PIN Number and complete the DUO Two-Factor Authentication.
- If you have a PIN already set, the system will ask for your PIN for all medications. The PIN is a four-digit passcode set by the provider.
- For the DUO Authentication, you have the option to enter the 6-digit code from the DUO Mobile App or receive a push notification.
- Enter your PIN number, as well as the security passcode (i.e., "two-factor authentication security code"), within Healthie. Once entered, click the "Sign & Send" button.
After clicking Sign & Send, your prescription will be moved to your Active Medications where you can monitor its status. If you click the status symbol you can see a timeline of the medication being sent.

Prescribing Controlled Substances in the Enhanced UI

Prescribing controlled substances within Healthie functions the same as prescribing other medications, with an added TFA step.

You will need to have the DUO Mobile app installed on your smartphone (see the steps outlined above)

Click on the Add Prescription button > search for and select the medication
Select the Pharmacy (see article Pharmacy Search for more info)
Select a DEA Number ((DoseSpot will automatically select the DEA number that most closely matches the pharmacy address).
Fill in the following pharmacy information:
- Choose the effective date. This will be the day the patient can pick up the prescription.
- Add directions, dispense amount, how many refills will be allowed and the days’ supply.
- To add pharmacy notes, click the + next to Show Pharmacy Notes. You can select from the list of provided 'common notes' or enter custom notes as needed.
- Select No Substitutions IF you do not want the pharmacy to look for other options such as generic versions of the selected drug.
- Choose whether or not the prescription is Urgent or not.
- If this is a commonly used prescription, you can select Save As Favorite. This will make it easier to select the same prescription later.
Click Create Prescription. The medication will be added to your Pending Medications list.
Once in your Pending Medications, you can review the medication before sending. when ready, select the medication from the list and click Approve and Send.
Complete the Final Review & Sign Off by entering your 4-digit PIN Number
- If you have a PIN already set, the system will ask for your PIN for all medications. The PIN is a four-digit passcode set by the provider.
After verifying the information, select the Ready to Sign checkbox.
To send the controlled substance, you will be asked to complete the DUO Two-Factor Authentication.
Once you click Approve from the DUO App, the medication will display in the client's active medications list.

EPCS Reporting

EPCS Audit and Incident Reporting is available for compliance with EPCS requirements. Learn more about how to request reporting access for your clinic: E-Rx Reporting Access

Additional Resources

Please email hello@gethealthie.com for a step-by-step EPCS Enrollment Supplement Guide.

Here is a DoseSpot Guide to help you learn more about leveraging DoseSpot in your business, and how DoseSpot directly integrates with Surescripts to populate patient information.

Additional information on PDMPs: Prescription Drug Monitoring Programs and Healthie