Medication Network Services: Advanced E-Prescribing Services

E-Prescribing of
Controlled Substances (EPCS)


Surescripts is leveraging our depth of experience in e-prescribing to support the industry's transition to a streamlined process for EPCS. Surescripts enables and optimizes the EPCS process for pharmacies, software vendors and prescribers while assuring quality, security and safety across our network.

  • Reduced fraud and abuse
  • Secure electronic records
  • Improved safety and patient care

Legal in 49 States
For healthcare communities, State regulatory approval is just one of the required milestones for enabling electronic prescribing of controlled substances (EPCS). Pharmacy system and physician EHR software companies must take additional security and technology steps to comply with The Drug Enforcement Administration's Interim Final Rule (IFR). Once these systems receive approved DEA audits, Surescripts certifies and connects pharmacy and prescriber applications for EPCS through the largest, most trusted national health information network.

Working together to coordinate these steps allows the healthcare community to experience the added security and efficiency of electronic prescribing of controlled substances. For a closer look at EPCS regulatory status by State, click on the EPCS Regulatory Status Map. To see pharmacy readiness by state or to search for EPCS-enabled pharmacies in your area, view our Pharmacy Enablement Map.

Certified Pharmacies and Software Vendors

Prescriber Software

Click here to search for prescriber software vendors that have achieved Surescripts certification and completed their third-party audits for e-prescribing of controlled substances.

Pharmacies and Pharmacy Software

To see the following pharmacies and pharmacy software vendors that have completed Surescripts certification and third-party audits for e-prescribing of controlled substances, please reference the list below. To view pharmacy readiness by state or search for EPCS-enabled pharmacies in your area, view our Pharmacy Enablement Map.

  • AdvanceNet Health Solutions 
  • Best Computer Systems
  • CarePoint
  • Cerner Etreby
  • Computer-Rx
  • Creehan & Company
  • CVS/caremark mail
  • CVS/pharmacy
  • CVS/specialty
  • Digital Business Solutions
  • ExcelleRx
  • Express Scripts Home Delivery
  • FrameworkLTC by SoftWriters
  • Foundation Systems
  • H E B Pharmacy
  • Health Business Systems
  • Humana Pharmacy
  • Injured Workers Pharmacy
  • KeyCentrix
  • Kroger
  • Lagniappe Pharmacy Services (Alpha, InteRx, OpusRx, PPC, Rx-1, Synercom, Visual)
  • Liberty Software
  • McKesson Pharmacy Systems (Condor, EnterpriseRx, PharmacyRx, Pharmaserv, Zadall)
  • MDScripts
  • Micro Merchant Systems
  • Omnicare
  • OptumRx
  • PD-Rx Pharmaceuticals
  • PDX
  • Pharmacy Systems, Inc
  • PharMerica
  • PioneerRx
  • Prodigy Data Systems
  • QS/1 Data Systems
  • Rite Aid
  • RNA - Helix
  • ScriptPro USA
  • SRS Pharmacy
  • SuiteRx
  • SuperValu
  • Thrifty White Pharmacy
  • Transaction Data Systems
  • VIP Computer Systems
  • Walgreens
  • Walmart

To see pharmacy readiness by state or to search for EPCS-enabled pharmacies in your area, view our Pharmacy Enablement Map.

Map current through April 1, 2015

State Regulatory Status & Pharmacy Enablement

Regulatory Status by State

See the regulatory status* of e-prescribing of controlled substances in your state.



EPCS Pharmacy Enablement by State

See the % of pharmacies enabled for e-prescribing of controlled substances in your state.



EPCS Provider Enablement by State

See the % of providers enabled for e-prescribing of controlled substances in your state.



Find EPCS Enabled Locations Nearby

Get Started by Adding Controlled Substances to your E-Prescribing Workflow

For Healthcare Providers*:

  • Four key actions must be completed before for your practice is able to electronically prescribe controlled substances (EPCS): 
    1. EHR software update
    2. ID Proofing
    3. Two-factor Authentication
    4. Set Software Access
  • We’ve made it easy for you to understand these key steps, watch the video and view the online resources at

Steps for Pharmacy and Prescriber Software:

  1. Update e-prescribing software to meet all requirements specified in the DEA’s Interim Final Rule and SCRIPT messaging that supports EPCS
  2. Undergo a third-party audit to ensure the software meets all DEA EPCS requirements
  3. Achieve Surescripts Certification for EPCS
  4. Make audit results available to Surescripts along with a completed Surescripts EPCS Audit Attestation Form

If your prescriber or pharmacy software application is already certified by Surescripts for core e-prescribing services, contact your Surescripts Account Representative to discuss a plan for EPCS certification. New software application vendors and pharmacies not currently certified by Surescripts for core e-prescribing services must have contracts in place with Surescripts before certification can begin. Click here to be contacted about Surescripts certification.

*EPCS is legal in all states except Montana. Please refer to the Readiness by State tab for more information.

Helpful Links


DEA: Interim Final Rule: The Electronic Prescriptions for Controlled Substances
Published March, 2010
The rule outlines requirements that are descriptive of the outcomes that the DEA wants to achieve. This is not a technical implementation specification.  They have been very prescriptive around security requirements, but leave the actual implementation up to the applications and the auditors to determine how to be compliant, and meet their user needs.

DEA: Electronic Prescriptions for Controlled Substances Clarification about Audits
Published October, 2011
The DEA published clarification on the Third Party Audits

DEA: Questions and Answers for Providers of Electronic Prescription Applications, Pharmacy Applications, and Intermediaries
The information on this webpage is not intended to convey specific information about every aspect of the rule, nor is it a substitute for the regulations themselves.

DEA: EPCS Interim Final Rule - Questions and Answers for Pharmacies

DEA: EPCS Interim Final Rule - Questions and Answers for Prescribing Practitioners

National Association of Boards of Pharmacy (NABP) - Find your state board of pharmacy

After EPCS software has met regulatory requirements, been audited, certified and set up with two-factor authentication technology, the last step is identity proofing for the prescriber. The DEA allows identity proofing to be done by any federally approved Credential Service Provider (CSP) or certificate authority (CA) that is Level of Assurance 3 or higher. Prescribers must register their authentication credentials before they are enabled to send electronic prescriptions for controlled substances.

New York State EPCS Requirements


Individual Practitioners Q & A: Getting Started With Identity Proofing

Institutional Practitioners Q & A: Getting Started With Identify Proofing

National Institute of Standards and Technology (NIST) Electronic Authentication Guideline

Tips for Providers Starting E-Prescribing of Controlled Substances

Guidelines for EPCS: Identity Proofing, Issuing Authentication Credentials, and Configuring Logical Access Controls

Federal Identity, Credential and Access Management Trust Framework Provider Credential Services.
This is not an exhaustive list. Any provider that is NIST 800-63 LOA 3 is allowed. Providers may be approved by the Federal Bridge Certificate Authority, universities and educational bridges related to these CAs and Trust Frameworks.

Entities Cross-Certified with the Federal Bridge


Evaluation of Electronic Prescribing of Controlled Substances Pilot - California HealthCare Foundation

NCPDP Annual Conference Presentation - EPCS: Future Opportunities & Real Life Experiences

Related Content

National Progress Report

E-prescribing’s success is changing healthcare by demonstrating that Health IT has become a critical component for the efficient delivery of medicine and cost-effective patient treatments.

Why choose Surescripts?

We ensure the free and secure flow of vital health information to get it to the right place at the right time.

Network Connections

With the Surescripts network you can electronically exchange information with a wide array of community care partners via a single point of connectivity—regardless of your technology platform.