Mandatory Disclosures
ONC Certification Criteria for Health IT
ONC Disclosures: 170.315(d)(13) MFA disclosure
Meaningful Use Certification Details:
Developer organization name: DAW SYSTEMS, INC.
“This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services. (ScriptSure Cloud v3.0). This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
ScriptSure Cloud v3.0 - Holds Certificate No: 15.04.04.2919.Scri.03.02.0.231102 and Date Certified November 2, 2023.
The following modules and Clinical Quality Measures (CQMs) were tested by Drummond Group for v3.0:
- Modules Tested: 170.315 (a)(1, 4-5); (b)(3, 10); (d)(1-8, 12-13); (g)(2-5)
- Clinical Quality Measures tested: None.
- Additional software used: None for testing.
- First Data Bank, Surescripts Network for Clinical Interoperability, ID.me used by the product generally.
- DAW SYSTEMS, INC. - support@dawsystems.com - 1-866-755-1500
Costs & Fees
Users of ScriptSure Cloud ERX v3.0 will face the following type of costs in many deployments. Please consult your sales representative for more information. The table below shows items that a user can expect:
| Cost related to ScriptSure EMR application | Costs |
|---|---|
| Costs/Fees to Use the Certified Software | Users can purchase the software as a monthly license or annual license with support. Monthly and annual license purchases can expect monthly or annual charges at the rate with any discounts extended for use of the application. Each DEA-licensed user or user with an NPI number entered on their profile incurs a charge. The license fees and annual support charges give end user access to application production environments, updates, database updates, upgrades and technical support. Additional fees apply for users that would like to Electronically Prescribe Controlled Substances (EPCS). |
| Required 3rd Party Software | ScriptSure Cloud ERX requires no 3rd party software be purchased, but Google Chrome is recommended download for use of this application. For users that need to Electronically Prescribe Controlled Substances (EPCS), those users must get identity proofed and purchase a security token from our partner ID.ME in order to EPCS. The costs for EPCS are separate from the license fees to use the application. |
| Support | Support is included with license purchases. Support can be either email or telephone support during service level hours. |
| Drug Database Usage | Base drug database usage fees are included in the monthly and annual fees. Users can upgrade to get more drug database information (e.g. enhanced drug descriptions and features). |
| Document Storage | There are no fees to store base data of the application, but for documents uploaded to ScriptSure Cloud ERX, there are fees for document storage. These fees are based on the end users amount of space utilized. |
| Optional Prescription Printing | We offer prescription-sized printer and secure prescription paper as needed. Users can opt to use any HP-Compatible printer of their choosing. |
| Setup and Installation | With ScriptSure Cloud ERX, the initial setup can be done through self-paced, self-service windows from within the settings and buy now functions on the site, or ScriptSure staff can assist with setup at no charge. |
| Reinstallation | ScriptSure Cloud ERX does not require an installation. For provider users, installation of ID.me MFA application on a mobile device is required in order to EPCS; this is a simple download via the APP store on a mobile device. |
| Custom report generation | One-time fee for ScriptSure Cloud ERX. |
| Custom export of patient data for migration | One-time fee or ScriptSure Cloud ERX - consult a sales rep. for more detail. |
| 3rd party integrated apps in ScriptSure Cloud ERX | ScriptSure contains the ability to add 3rd party applications. These applications typically carry monthly or annual fees for their use. ID.ME functionality for ID Proofing and EPCS token is an example of a 3rd party integrated application. |
| Data Interfaces | Custom programming to interface to 3rd applications for sharing data is typically a one-time fee, but in certain circumstances can carry monthly or annual maintenance fees depending on complexity. Rest APIs are available for this. |
| E-Prescribing Controlled Substances | For users that would like to Electronically prescribing controlled substances (EPCS), there are additional monthly or annual fees and there is a requirement to purchase a 2-factor authentication hard token device or soft token for secure sending; additional cost for the token may need to be paid to third parties (e.g. Yubico for hard tokens) for these security tokens. Soft tokens are available through ID.ME for the ScriptSure Cloud ERX application. |
| Cost for Meaningful Use Certified Products | There are no additional costs for the certified module(s). |
| Current Retail License | $60/month/provider. This before any discounts or incentives. Please contact sales for any discounted pricing. |
| Live Training | There are additional costs at the current rates. Training my be included in certain sales. Access to documents, help videos, help menus is included; consult a rep. for more information on training. |
Contracts
All users must sign a contract for use of the ScriptSure Cloud ERX product. The term of the contracts are generally for 12 months, but may be shorter/longer under certain circumstances.
Contracts, accounts and access can be cancelled by end users. To cancel, login to ScriptSure, click your name in the top right then click UPDATE BILLING and you will see a cancel button Note, if you are an EMR or invoice-pay customer user, you will need to contact support@dawsystems.com to cancel.
ScriptSure Cloud ERX required ID Proofing through ID.ME before being registered on the Surescripts ERX network and sending prescriptions.
For users that would like to leverage document storage, you can select Google Drive for an online storage provider. This requires contracting with and pay fees directly to Google.
All users must accept Terms of User, Privacy Policy and Code of Conduct) available to users prior to purchase.
All accounts must sign a Business Associate Agreement (BAA) with Daw Systems, Inc. in order to comply with HIPAA.
ScriptSure Cloud ERX only functions on web-connected devices that meet the minimum required internet speeds for connectivity and approved browsers and versions of those browsers as may be updated from time-to-time.
The ScriptSure Cloud ERX certification from ONC-HEALTH IT is limited to ambulatory care settings.
Any users that want to EPCS, must purchase a 2FA token and get ID Proofed.
Printing prescriptions, reports and audit logs is supported in ScriptSure Cloud ERX. The ScriptSure Cloud ERX application simply uses the web browser's printing capabilities to send print jobs to an installed or otherwise accessible printer on the device you are using (e.g. Google Chrome, Apple Safari, New Microsoft Edge). ScriptSure Cloud ERX may include the ability to export demographics, report data and audit logs to file formats such as Microsoft Excel (.xlsx) or Microsoft Word (.doc) formats or PDF. To open these exported files, end users will need to have access to applications compatible with opening the respective file. Microsoft office and PDF viewers are not included with ScriptSure Cloud ERX.
For ScriptSure EMR and other legacy installed applications, Microsoft Office, including Word and Excel, and PDF viewers are required for printing certain documents and reports. Microsoft office and PDF viewers are not included; purchased separately at the end user's cost.
ONC Certification Criteria for Health IT disclosure statement and certificates here:
- Mandatory Disclosure Statement - ScriptSure v3.0
- Certificate of Health IT Compliance - ScriptSure v3.0
Advanced SVAP Notice: In January 2025, ScriptSure Cloud ERX completed upgrade to NCPDP 2023011 standard. ScriptSure Cloud ERX was the first ambulatory application in the country to reach this certification level. Existing providers and new providers do not need to take any steps for this update. Prescribing processes have not changed with this update. While there are more features particularly with the SIG (directions) line on the prescriptions, end users will have no issue prescribing medications as they always have. Any users with questions can contact support. Version 3.0 is compliant with the ONC Certification Criteria for Health IT.
Real World Testing Plans
The ONC Health IT Certification Program requires DAW Systems, Inc. to successfully test the real world use of the ScriptSure Cloud ERX technology for interoperability in ambulatory settings (see 45 CFR 170.405). Click the following link to navigate to DAW Systems, Inc. Real World Test (RWT) public information page: Real World Testing Plans. The RWT plan focuses on applicable certification criteria, specifically 170.315 (b)(3): Electronic Prescribing represented as individual user stories, in Ambulatory setting of care and 170.31(b)(10), export EHI capabilities.
Information Blocking Compliance
ScriptSure Cloud ERX Version 3.0 since November 2, 2023 is fully compliant with the Information Blocking Rule (45 CFR part 171, 42 U.S.C. 300jj-52 and § 171.103) requirements and ultimately the HIPAA Right of Access. DAW does not intefere with our clients or their patients access, exchange, or use of electronic health information.
Electronic PHI (ePHI) is any protected health information that is maintained or transmitted within the ScriptSure Cloud ERX application(s). Designated Record Sets (DRS) are available to requestors in Human Readable Form (excel document .csv or xls and/or C-CDA with complete inclusion of all elements related to patient demographics and clinical records and ePHI stored; the C-CDA is not limited to USCDI info).
A record is defined as "any item, collection, or grouping of information that includes PHI and is maintained, collected, used, or disseminated by or for a HIPAA covered entity or business associate. A HIPAA DRS is a group of records maintained by or for a covered entity that is: 1) the medical records and billing records about individuals maintained by or for a covered health care provider; 2) the enrollment, payment, claims adjudication, and case or medical management record systems maintained by or for a health plan; or 3) used, in whole or in part, by or for the covered entity to make decisions about individuals." Ref: 45 CFR § 164.501.
Requests can be made directly to your EMR/EHR, to your account manager at DAW SYSTEMS, Inc. or to the Office of Civil Rights (OCR) at HHS. DAW SYSTEMS, Inc. will respond to your request within 30 days of receipt. If you are not satisfied with the response, you may file a complaint with OCR.
EHI Export Documentation
The following describes the Electronic Health Information (EHI) Export capability in ScriptSure Cloud ERX. The exports allow users to create a zip file of an individual patient, or all patients contained in the practice (application).
WHAT IS EHI?
EHI is electronic protected health information (ePHI) to the extent that it would be included in a designated record set (DRS) (other than psychotherapy notes or information compiled in reasonable anticipation of, or for use in, a civil, criminal, or administrative action or proceeding), regardless of whether the group of records is used or maintained by or for a HIPAA covered entity.
EHI EXPORTS TYPE
ScriptSure offers comprehensive and structured data in the C-CDA format. The following list of patient documentation will be exported in this format:
- Patient Demographics
- Practice Demographics
- Allergy Information
- Medication History Information
- Diagnosis / Problem Information
- Encounter Information
- Vitals Information
- Subjective Information