Electronic Prescribing for Controlled Substances
Integrating Electronic Prescribing for Controlled Substances (EPCS) within existing technology and workflows offers new dimensions of safety and security for controlled substance prescriptions.
Safer, faster controlled substance prescribing
EPCS provides accountability and security without sacrificing convenience. It's a powerful tool for tackling the nation’s opioid crisis.
Handles every prescription from one place
Physicians shouldn't need to change their entire workflow just because a medication is a controlled substance. EPCS lets them keep prescribing from within their EHR.
Reaches nearly all pharmacies
Virtually all U.S. pharmacies are EPCS enabled, so clinicians can securely transmit prescriptions to nearly any location.
Ready to meet regulatory requirements
An increasing number of states are passing legislation to mandate electronic prescribing of controlled substances. With Surescripts EPCS, you'll be in compliance.
We made It Easy. See the four key steps to get the benefits of EPCS certification.
Data sourced on: December 2022
Getting started: Steps for prescriber software vendors
Step 1
Update e-prescribing software to meet all requirements specified in the DEA’s Interim Final Rule and SCRIPT messaging that supports EPCS
Step 2
Undergo a third-party audit to ensure the software meets all DEA EPCS requirements
Step 3
Achieve Surescripts certification for EPCS
Step 4
Make audit results available to Surescripts along with a completed Surescripts EPCS audit attestation form
If your prescriber software is already certified by Surescripts for core e-prescribing services, contact your Surescripts Account Representative to discuss a plan for EPCS certification. EHR/prescriber software vendors not currently certified by Surescripts for core e-prescribing services must have contracts in place with Surescripts before certification can begin.
Request to be contacted about Surescripts E-Prescribing certification.Search for prescriber software vendors that have achieved Surescripts certification and completed their third-party audits for e-prescribing of controlled substances.
Getting Started: Steps for pharmacy software vendors
Step 1
Update e-prescribing software to meet all requirements specified in the DEA’s Interim Final Rule and SCRIPT messaging that supports EPCS
Step 2
Undergo a third-party audit to ensure the software meets all DEA EPCS requirements
Step 3
Achieve Surescripts certification for EPCS
Step 4
Make audit results available to Surescripts along with a completed Surescripts EPCS audit attestation form
If your pharmacy software application is already certified by Surescripts for core e-prescribing services, contact your Surescripts Account Representative to discuss a plan for EPCS certification. New software application vendors and pharmacies not currently certified by Surescripts for core e-prescribing services must have contracts in place with Surescripts before certification can begin.
Request to be contacted about Surescripts E-Prescribing certification.
EPCS-certified pharmacies and pharmacy software systems
The following pharmacies and pharmacy software vendors have completed Surescripts certification and third-party audits for e-prescribing of controlled substances:
Abacus
Accredo
AdvanceNet health solutions
Best Computer Systems
CarePoint
Cerner Etreby
Computer-Rx
Cost Effective Computers
Creehan & Company
CVS/caremark mail
CVS/pharmacy
CVS/specialty
DAA Enterprises
Digital Business Solutions
Enclara Pharmacia
Epic - Willow Ambulatory
Express Scripts Home Delivery
FrameworkLTC by SoftWriters
Foundation Systems
Haney's Drug Corner
H E B Pharmacy
Health business systems
Humana Pharmacy
Injured Workers Pharmacy
KeyCentrix
Kroger
Lagniappe Pharmacy Services (Alpha, InteRx, OpusRx, PPC, Rx-1, Synercom, Visual)
Liberty Software
McKesson Pharmacy Systems (Condor, EnterpriseRx, PharmacyRx, Pharmaserv, Zadall)
MDScripts
Micro Merchant Systems
Omnicare
OptumRx
PD-Rx Pharmaceuticals
PDX
Pharmacy Systems, Inc
PharMerica
PioneerRx
Prodigy Data Systems
QS/1 Data Systems
QuiqMeds
Rite Aid
RNA - Helix
ScriptPro USA
SRS Pharmacy
SuiteRx
SuperValu
Thrifty White Pharmacy
Transaction Data Systems
VIP Computer Systems
Walgreens
Walmart
EPCS regulatory resources
DEA: Interim Final Rule: The Electronic Prescriptions for Controlled Substances
Published March, 2010
The rule outlines requirements that are descriptive of the outcomes that the DEA wants to achieve. This is not a technical implementation specification. They have been very prescriptive around security requirements, but leave the actual implementation up to the applications and the auditors to determine how to be compliant, and meet their user needs.
DEA: Electronic Prescriptions for Controlled Substances clarification about audits
Published October, 2011
The DEA published clarification on the Third Party Audits
DEA: Questions and Answers for Providers of Electronic Prescription Applications, Pharmacy Applications, and Intermediaries
The information on this webpage is not intended to convey specific information about every aspect of the rule, nor is it a substitute for the regulations themselves.
DEA: EPCS Interim Final Rule - Questions and Answers for Pharmacies
DEA: EPCS Interim Final Rule - Questions and Answers for Prescribing Practitioners
National Association of Boards of Pharmacy (NABP) - Find your state board of pharmacy
After EPCS software has met regulatory requirements, been audited, certified and set up with two-factor authentication technology, the last step is identity proofing for the prescriber. The DEA allows identity proofing to be done by any federally approved Credential Service Provider (CSP) or certificate authority (CA) that is Level of Assurance 3 or higher. Prescribers must register their authentication credentials before they are enabled to send electronic prescriptions for controlled substances.
New York State EPCS Requirements
EPCS identity proofing & authentication resources
Individual Practitioners Q & A: Getting Started With Identity Proofing
Institutional Practitioners Q & A: Getting Started With Identify Proofing
National Institute of Standards and Technology (NIST) Electronic Authentication Guideline
Tips for providers starting E-Prescribing of Controlled Substances
Guidelines for EPCS: Identity proofing, issuing authentication credentials, and configuring logical access controls
Federal Identity, Credential and Access Management Trust Framework Provider Credential Services.
This is not an exhaustive list. Any provider that is NIST 800-63 LOA 3 is allowed. Providers may be approved by the Federal Bridge Certificate Authority, universities and educational bridges related to these CAs and Trust Frameworks.
Entities Cross-Certified with the Federal Bridge
General EPCS resourcesNCPDP annual conference presentation - EPCS: Future opportunities & real life experiences
Find an EPCS enabled
location close by
National Progress Report
Explore our National Progress Report and see how the Surescripts Network Alliance's® efforts to increase patient safety, lower costs and ensure quality care are making an impact.
Learn more