FAQs - Technology Vendors

What are the best practices for ID proofing?

There are varying methods for ensuring a person's identity and how much confidence (or assurance) one can place in the identity proofing process.  The more robust the process, the greater assurance there is that the person is who they claim to be.  The U.S. government and other parties have set four levels of assurance, Assurance Levels 1, 2, 3 and 4, developed by the National Institute of Standards and Technology.

While there is no single standard for ID proofing for e-prescribing, Surescripts encourages all EHR vendors to target at least Assurance Level 2 and consider industry best practices to ensure the security of all participants on our network.

Surescripts does not dictate the mechanism or manner by which EHR vendors and aggregators choose to implement identity proofing processes that best suit their business model.