Skip to main content

Digital Certificates

EPCS Certificates for DEA-Compliant ePrescriptions

IdenTrust EPCS certificates support DEA-compliant ePrescriptions, helping healthcare providers securely prescribe controlled substances with trusted digital credentials.

Use DEA-approved credentials for Electronic Prescribing of Controlled Substances (EPCS)

Electronic Prescribing of Controlled Substances (EPCS), regulated by the Drug Enforcement Administration (DEA), enables prescribers and pharmacies to electronically process prescriptions for controlled substances.  Under EPCS, prescribers must obtain a two-factor authentication credential from an approved credential service provider or a certification authority that meets specific federal standards. These credentials are used to digitally sign ePrescriptions, and pharmacies validate these signatures to ensure authenticity before fulfilling a prescription. 


IdenTrust EPCS solutions simplify compliance with EPCS regulations, enabling eHR/eMR partners to select authentication methods and implementation options that suit their application architecture and customer needs. IdenTrust offers IdenTrust Global Common (IGC) certificates, which are DEA-compliant for EPCS usage. These certificates are issued following identity proofing processes as required by the DEA.
 

IdenTrust IGC certificates meet DEA requirements for EPCS and electronic healthcare

IdenTrust IGC certificates are designed to meet strict DEA EPCS requirements for secure electronic prescribing of controlled substances. Whether you're integrating with eHR systems or verifying identity remotely, our solutions support compliant EPCS prescriptions with flexible authentication and trusted digital credentials.

Doctor icon with a checkmark
Identity Proofing
Prescribers benefit from remote identity proofing that meets DEA EPCS standards—no video calls or in-person appointments required. This streamlined process helps providers quickly obtain their EPCS certificate while maintaining compliance with federal identity verification protocols

Computer Icon with clipboard and medical icons
eHR/eMR Integration
IdenTrust EPCS certificates are accepted by over 40 leading eHR and eMR platforms, ensuring seamless integration into your existing prescribing workflow. This compatibility supports secure, compliant EPCS prescriptions across a wide range of healthcare systems.

Icon with usb stick and smart phone
Flexible Authentication
Meet EPCS requirements with flexible two-factor authentication options. Prescribers can verify and sign prescriptions using either a hardware token or the HID Approve mobile app—both approved for DEA EPCS compliance and designed for ease of use.

Select your organization or eHR/eMR affiliation on the next screen to view compatible certificate types and storage options for DEA-compliant EPCS prescriptions.

IdenTrust helps eHR and eMR application providers meet EPCS requirements with seamless integration support. Our solutions ensure your platform is ready for DEA EPCS compliance, enabling secure and efficient EPCS prescriptions for controlled substances.

  • EPCS for eHR/eMR Application Providers

    Enable DEA EPCS Prescriptions in Your eHR/eMR System

    IdenTrust helps eHR and eMR application providers meet EPCS requirements with seamless integration support. Our solutions ensure your platform is ready for DEA EPCS compliance, enabling secure and efficient EPCS prescriptions for controlled substances.

  • EPCS for Pharmacies

    Compliant EPCS Processing for Pharmacies

    Pharmacies rely on the IdenTrust Cloud Validation Service to verify prescriber credentials and maintain compliance with DEA EPCS regulations. Our service streamlines prescription validation and supports secure dispensing of controlled substances.

  • DirectTrust  Compliant Solutions

    Certified Services for Health Information Exchange

    IdenTrust offers DirectTrust-certified solutions that support secure data exchange and patient program partnerships. These services enhance interoperability and compliance across healthcare networks, aligning with EPCS requirements and broader regulatory standards.

Streamlined Compliance Through Strong Collaboration with DEA-Approved Auditors

IdenTrust works closely with all five DEA-approved auditors specializing in EPCS prescriptions, offering deep familiarity with our solutions and processes. This collaboration helps eHR/eMR application providers streamline their path to compliance with DEA EPCS requirements, reducing complexity and accelerating readiness for electronic prescribing of controlled substances.

Identity Proofing

To meet DEA EPCS standards, identity proofing must follow strict NIST guidelines. IdenTrust offers remote identity verification, eliminating the need for video calls or in-person appointments. This secure and efficient process ensures that only verified prescribers receive access to EPCS certificates

eHR/eMR Integration

IdenTrust’s EPCS solutions are compatible with over 40 leading eHR and eMR systems, making integration seamless for healthcare providers. Use our partner list to confirm support and ensure your platform meets EPCS requirements for secure and compliant prescribing workflows.

Two-Factor Authentication

Our DEA EPCS-compliant certificates include robust two-factor authentication (2FA), using either hardware tokens or the HID Approve mobile app. This ensures that only authorized prescribers can digitally sign and submit EPCS prescriptions, protecting patient data and prescription integrity.

Diversion Control Division Logo

Frequently Asked Questions

1. What type of digital certificate do I need for EPCS compliance?  

You need a DEA-compliant IGC (IdenTrust Global Common) digital certificate. This certificate enables you to digitally sign ePrescriptions and meet the DEA’s two-factor authentication requirements for EPCS.

2. How do IdenTrust certificates compare to NIST 800-63 identity provider credentials?  

IdenTrust certificates serve a similar purpose to credentials issued by NIST 800-63 identity providers—both are used to verify identity and enable secure access to government systems. However, IdenTrust certificates are X.509 digital certificates used for cryptographic functions like digital signing, email encryption, and secure authentication. In contrast, NIST 800-63 credentials are typically used for federated login and identity proofing in web-based access systems. 

While both meet high assurance standards and EPCS compliance, they are governed by different technical frameworks.

3. How does IdenTrust verify my identity for an EPCS certificate?  

IdenTrust uses a remote identity proofing process that complies with DEA regulations. This process does not require in-person visits or video calls. You’ll submit identity documents and complete verification steps online, making it fast and convenient for busy healthcare professionals.

4. Can I use my EPCS certificate with my eHR or eMR system?  

Yes. IdenTrust IGC certificates are accepted by over 40 eHR and eMR application providers. These certificates integrate seamlessly with your existing systems to enable secure, compliant electronic prescribing.

5. What authentication methods are supported for EPCS?  

IdenTrust supports flexible two-factor authentication options, including:

  • Hardware Tokens
  • The HID Approve mobile app

 

These methods meet DEA EPCS requirements and allow you to securely authorize prescriptions from any location.

6. How does IdenTrust support eHR/eMR vendors with EPCS integration?  

IdenTrust works closely with DEA-approved auditors and offers a Cloud Validation Service to help eHR/eMR vendors streamline compliance. This collaboration simplifies the certification process and accelerates time to market for EPCS-enabled applications. 

7. Can pharmacies validate EPCS prescriptions signed with IdenTrust certificates?  

Yes. Pharmacies can validate digitally signed prescriptions using the IdenTrust Cloud Validation Service, ensuring that each ePrescription is authentic and compliant before dispensing controlled substances.