Configuration
Live

Controlled Substances EPCS

Prescribe controlled substances electronically through Healthie's E-Rx integration, gated behind a separate Enterprise-only add-on, identity proofing process, and $20/provider/month fee on top of standard E-Rx. Providers can prescribe non-controlled substances while EPCS identity verification is still in progress. Includes EPCS Audit Trail and Incident reporting for compliance.

Built by Core Engineering

The problem it solves

Providers who prescribe controlled substances need a compliant, DEA-compatible way to transmit those prescriptions electronically, verify their identity to the standard required for controlled substance prescribing, and produce audit records when needed. Controlled Substances EPCS solves this by layering the required identity verification and compliance reporting on top of Healthie's existing E-Rx integration.

What's included

  • Electronic prescribing of Schedule II-V controlled substances via DoseSpot/Surescripts
  • Experian-based identity proofing (IDP) as part of enrollment, including a facial recognition verification step
  • ID.me fallback identity verification path after 3 failed Experian attempts
  • Interim non-controlled prescribing access while EPCS approval is pending
  • EPCS Audit Trail and Incident Report for compliance and certification prep
  • Availability restricted to Healthie's Enterprise plan

How it works

A provider indicates they need EPCS permissions when completing Healthie's E-Rx Application Form, including their DEA number. After DoseSpot approves standard E-Rx access, DoseSpot initiates Identity Proofing (IDP) through Experian, requiring the prescriber's credit card, social security number, and driver's license information, followed by a facial recognition step completed via a text-messaged link on a mobile device. If the Experian identity questions fail after 3 attempts, the provider is automatically redirected to ID.me for identity verification instead; once verified through ID.me, a confirmation email is sent, though the verification typically takes about 24 hours to fully process on DoseSpot's backend before E-Rx access reflects it. This step can take 5 or more additional business days beyond standard E-Rx approval. Once IDP is complete, the provider gains EPCS access and can prescribe controlled substances directly from the Medications widget on a client's profile. EPCS Coordinators with reporting access enabled can pull an EPCS Audit Trail or Incident Report from the E-Rx Reporting Access permissions, useful for compliance certification.

Controlled Substances EPCS lets E-Rx-enabled providers prescribe controlled substances electronically, gated behind a separate approval and identity verification process beyond standard E-Rx. It's built for prescribers who need to send Schedule II-V medications electronically rather than via paper prescription, while meeting DEA and Surescripts compliance requirements. EPCS requires third-party identity proofing through Experian, which asks for a credit card, social security number, and driver's license; if a clinician can't pass Experian's identity checks (for example, due to limited credit history), there is no workaround, since this is a requirement from the identity verification vendor rather than Healthie or DoseSpot. While identity proofing is in progress, providers can still prescribe non-controlled substances through their existing E-Rx access.

Building on Healthie?

Talk to our team about API access, white-label, and enterprise architecture — or dive into the docs.