Compliance & Security

Prescriber Verification

Every prescriber on ConnectMeds is identity-proofed before prescribing is enabled. We verify NPI, state license(s) in each state where the prescriber will treat patients, and DEA registration where applicable, and we re-verify on a recurring schedule.

• Each user has a named credential; shared logins are not permitted.
• Staff accounts can prepare orders but cannot sign or transmit a prescription.
• Every prescription carries an audit record of who created, signed, and sent it.
• Prescribers select the dispensing pharmacy; patients may request any pharmacy they prefer.

Controlled Substances

The ConnectMeds platform does not transmit prescriptions for Schedule II–V controlled substances.

Platform Security

• Data is encrypted in transit (TLS 1.2 or higher) and at rest.
• Multi-factor authentication is enforced for all provider and staff accounts; sessions time out after inactivity.
• Access is role-based, and every access to patient data is logged.
• ConnectMeds signs a Business Associate Agreement with every practice and every dispensing pharmacy.
• Payment card data is handled by our PCI-compliant payment processor and is never stored by ConnectMeds.

Certifications

• LegitScript Certified Healthcare Merchant — verify at legitscript.com.
• Business Associate Agreements with every practice, pharmacy, and subcontractor that handles PHI.

Report a Concern

To report a security concern or a suspected compromised account, contact connect@connectmeds.com or call 866-261-2345. See also our HIPAA & PHI Statement and Privacy Policy.