Full definition
EPCS (Electronic Prescribing of Controlled Substances) is the US Drug Enforcement Administration regulatory framework permitting electronic prescription of controlled substances. Standard e-prescribing covers most outpatient medications; EPCS extends that to DEA-controlled substances (Schedule II-V — opioids, stimulants, sedatives, anabolic steroids, certain other categories) with elevated requirements.
The EPCS technical requirements: clinician identity proofing (in-person or remote with strict verification), two-factor authentication on every prescription (typically biometric or hardware token + password), DEA registration verification, prescription-record audit trail, and prescriber digital-signature on the prescription transmission. The CMS SUPPORT Act (2018) mandates EPCS for Medicare Part D from 1 Jan 2021; many states have additional EPCS mandates.
For a US clinic platform serving Medicare patients: EPCS is non-negotiable. MOVO-X supports the EPCS workflow — clinician identity proofing, MFA enrolment, prescription transmission to Surescripts, audit logging — for US deployments.
Where epcs (electronic prescribing of controlled substances) is used
- US outpatient prescribing of controlled substances
- Pain-management clinics
- Psychiatry and behavioural-health prescribing
- Telemedicine controlled-substance prescribing (with state-specific restrictions)
- Hospital discharge prescribing
Types of epcs (electronic prescribing of controlled substances)
In-person identity proofing
Trusted-agent verification of identity in person.
Remote identity proofing
NIST IAL2-compliant remote verification.
Hard token MFA
Hardware token (YubiKey, SafeNet) for two-factor.
Soft token MFA
Smartphone app token (Authy, etc.).
Biometric MFA
Fingerprint or face match for two-factor.
Quantified benefits
- ▸Eliminates handwritten controlled-substance prescriptions
- ▸Reduces forgery and diversion risk
- ▸Strong audit trail for regulatory and legal review
- ▸Required for Medicare Part D (CMS SUPPORT Act)
Frequently asked
Is EPCS US-only?+
The specific framework is US DEA-driven. Other jurisdictions have analogous regimes for controlled-substance e-prescribing (Schedule M in Canada, etc.). MOVO-X supports the requirements for jurisdictions where the platform is deployed.
What MFA factors are accepted?+
NIST AAL2 — typically password + (hard token OR soft token OR biometric). Fingerprint plus password is common in clinical workflow.
Does MOVO-X support EPCS?+
Yes for US deployments. We integrate with Surescripts for transmission, support multi-factor authentication, and audit-log every controlled-substance prescription.
What about telemedicine controlled-substance prescribing?+
State-specific. Several US states permit it under specific conditions; others restrict it. MOVO-X supports telemedicine EPCS where state law allows; the platform enforces jurisdiction-specific rules.
How does identity proofing work?+
Either in-person (a trusted agent verifies identity) or NIST IAL2-compliant remote (typically credential-service-provider verifying identity documents and biometric). One-time enrolment; MFA on every subsequent prescription.