Bravado Health Gives Customers Confidence with EPCS Certification
Challenge
Approach
“While our work doesn’t touch patients directly, you can’t overestimate the value of verified HIPAA compliance to a hospital executive. It’s a credential that adds to our credibility. The fact that Mendix has third-party HIPAA validation is an important plus for us and our clients.”
Richard D. Palarea, CEO
Kermit
Results
Drummond’s EPCS certification process, with a strong emphasis on requirements review, was essential in guiding Bravado Health through the complicated detail in 21 CFR 1311 Final Rule for EPCS. With this clear understanding of the DEA’s requirements, Bravado Health in turn had confidence to start development of the application requirements in their product. This guidance allowed Bravado Health to save many hours of research and to begin development sooner.
During the development process Drummond scheduled regular meetings to address ongoing questions, as well as provided technical expertise on two-factor authentication, identify proofing, biometrics, and security and digital certificates.
About Bravado Health
Bravado Health was founded by physicians and engineers in 1998 to streamline the discharge process. From its origin in discharge technology, Bravado Health expanded its portfolio to patient engagement and web-based applications. Today, Bravado Health provides solutions for some of the nation’s most recognizable and innovative healthcare organizations. Bravado Health’s newest platform, Ayva, extends beyond the point of care by offering web-based health experiences.
Electronic Prescriptions for Controlled Substances (EPCS) is a Federal Rule which allows for the electronic transmission of prescriptions of Controlled Substances. In response to the rising prescription drug abuse problem, the US Drug Enforcement Administration (DEA) and states worked together to create programs and legislation to deter abuse and misuse. EPCS has mandates at the national and local levels governed by the DEA to reduce the potential for diversion, and subsequent abuse of controlled substances.
The DEA Title 21 CFR provides guidance for EPCS. EPCS technology is addressing the problem of forged or stolen prescriptions by requiring authentication of prescribers, improving security standards, and auditing activity on EPCS platforms. States that mandate this today include New York, Maine, Connecticut and Pennsylvania. By 2022 half the states in the US will mandate EPCS certification.