OneRecord Is First To Achieve EHNAC Trusted Dynamic Registration & Authentication Certification (TDRAAP-Basic)

OneRecord Is First To Achieve EHNAC Trusted Dynamic Registration & Authentication Certification

Chief Barketing Officer

NEW YORK, NEW YORK – November 25, 2020 – OneRecord, a consumer-facing health platform with apps on iOS, Android, and web – announced today it has achieved full Trusted Dynamic Registration & Authentication Accreditation Program (TDRAAP)-Basic certification from the Electronic Healthcare Network Accreditation Commission (EHNAC). Developed in collaboration with UDAP.org, TDRAAP-Basic supports interoperability requirements within the Office of the National Coordinator's (ONC’s) Cures Act Final Rule and related CMS Interoperability and Patient Access Final Rule.

TDRAAP-Basic certification offers privacy and security self-attestation with targeted validation while the included UDAP technical framework certification demonstrates that an entity’s end-to-end API can be trusted by patients and other industry stakeholders. It is designed specifically for developers of consumer-facing apps, also referred to as a patient’s “App of their Choice,” as used in workflows mandated by ONC and CMS that include SMART app launch with individual sign-on. TDRAAP-Basic thus supports the use of individual queries for “one-patient-at-a-time FHIR data access” using the credentials issued by the healthcare system publishing the API for the Individual to access data.

Through EHNAC’s third-party summary review via Subject Matter Expert of the Self-Attestation materials, OneRecord was evaluated in areas of security, privacy, regulatory compliance and rights management. Upon completion of the Self-Attestation materials and evidence of passing the technical certification framework, the organization demonstrates to its constituents, that it adheres to standards and participation in the objective evaluation of its business.

“As organizations look to meet the requirements of the Cures Act, TDRAAP was established to support an organization’s continued focus on interoperability and privacy/security – which are foundational components for ONC, CMS, OCR and other agencies, as well as all organizations subject to handling sensitive data. TDRAAP-Basic supports interoperability with a specific focus on technical standards enabling trust and transparency for both organizational and individual access to data,” said EHNAC Executive Director and CEO Lee Barrett. “We commend OneRecord on attaining this important certification which will serve as a “good housekeeping seal” of proven readiness and trust to enter onto the interoperability digital exchange highway.” 

OneRecord supports industry stakeholders who are complying with the patient access requirements of the 21st Cures Act by providing the most easy-to-use application for patients to connect to their healthcare data. OneRecord’s user-centered design, security, and accessibility standards make it the clear choice for patients. 

“At OneRecord, we don’t believe anyone should have to trade privacy for access to information,” said Jennifer Blumenthal, CEO of OneRecord. “We’re excited to be the first to achieve EHNAC’s TDRAAP-Basic certification. This shows industry stakeholders that OneRecord can be part of any trusted network. Providers, Payers, and health IT developers can dynamically register OneRecord with authorization servers which eases the app onboarding process and focuses their efforts where they mean the most, patient care.”

TDRAAP-Basic demonstrates ability to use trusted digital certificates for endpoint identity, registration, authentication, and attribute discovery for electronic healthcare transactions in real-time.

Learn about OneRecord's enhanced understanding of the CMS Patient Access rules through its participation in the CARIN Consumer Directed Payer Data Exchange with Aetna, Cigna, Optum, Aetna, Humana, UPMC, and more.

OneRecord is on FHIR at the CARIN Connectathon for Payers

The CARIN Alliance hosted a two-day Connectathon focusing on advancing the CARIN Consumer Directed Payer Data Exchange (CARIN IG for Blue Button®) Implementation Guide to rapidly advance the ability for consumers and their authorized caregivers to easily get, use and share their digital health information when, where and how they want to achieve their goals.

OneRecord participated in the Connectathon’s hands-on testing with more than nine of the payer vendor server systems including Aetna, Cigna, Optum, Humana, UPMC, and more. Our testing included working directly with these vendors to troubleshoot their systems, helping to identify opportunities for bettering the interoperability between systems, and better understanding the intention behind the FHIR specifications that are being tested. 

OneRecord successfully authenticated against servers using the SMART on FHIR (OAuth) protocol and were then able to retrieve insurance EOB FHIR Bundles, both as summaries and as fully referenced datasets.

OneRecord’s participation in the CARIN Connectathon has enabled us to interact with MITRE and CMS to continue improving understanding of the CMS Patient Access rules.

Overall the CARIN Connectathon has given us the opportunity to strengthen our own implementation. We look forward to the developed relationships with several payers to continue testing past this Connectathon in support of enabling an interoperable payer/patient ecosystem.

The CARIN Alliance is a non-partisan, multi-sector alliance co-founded by David Blumenthal, David Brailer, Aneesh Chopra, and Mike Leavitt. The Alliance is led by distinguished risk-bearing providers, payers, consumers, pharmaceutical companies, consumer platform companies, health IT companies, and consumer-advocates who are working collaboratively with other stakeholders in government to overcome barriers in advancing consumer-directed exchange across the U.S.

Want to learn more about the CARIN Alliance? Click here

Learn about OneRecord's enhanced understanding of the CMS Patient Access rules through its participation in the CARIN Consumer Directed Payer Data Exchange with Aetna, Cigna, Optum, Humana, UPMC, and more.

Learn about OneRecord's enhanced understanding of the CMS patient Access rules through its participation in the CARIN Consumer Directed Payer Data Exchange and with Aetna, Cigna, Optum, Humana, UPMC, and more

Carin launched the My Health Application website and OneRecord is featured.

OneRecord featured in The CARIN Alliance's “My Health Application” inaugural list

Today, the CARIN Alliance, a non-partisan, multi-sector alliance focused on providing digital health information to consumers where, when, and how they want to achieve their goals, launched the My Health Application website. The website offers a vendor and platform agnostic location to help consumers select a health care application of their choice to aggregate their clinical, coverage, and payment information. 

We are pleased to announce the inaugural set of 11 consumer-facing applications on the My Health Application website (in alphabetical order):

Buzz Secure Medical Messenger by Skyscape 

My Family Health Record by CareEvolution 

My Health Application was created by the CARIN Alliance because they recognized the need for a centralized vendor and platform agnostic location for individuals to find applications that would allow them to access and utilize their health data. Individuals will find applications on the website who have attested to the CARIN code of conduct, an industry-leading set of privacy, security, and consent guidelines for consumer-facing applications to follow when handling health information. 

When users click on ‘Select an App’, they will find detailed screenshots and information for each application on the ‘Application Gallery’ page. In addition to the CARIN code of conduct, users will also find applications who are affiliated with other trusted sources such as the Centers for Medicare and Medicaid Services (CMS), the Veterans Health Administration, Carequality, CommonWell Health Alliance, 1up Health, and Apple Health. Applications who are affiliated with these trusted sources will help begin to establish trust over time. The consumer can easily link to the application’s privacy policy and terms of service so they can access information about how the application is accessing, using, and storing the consumer’s health information. Over time, the website may include an application’s third-party certifications once those services become more widely available in the market. 

The CARIN Alliance envisions a future where consumers can choose an application of their choice to retrieve both their complete health record and complete coverage information from any provider or health plan in the country based on their individual consent sharing preferences. My Health Application helps consumers accomplish that goal by offering a transparent way for them to view consumer-facing applications in a single location.

Want to see the full press release? Click here

We'll be in touch to discuss next steps shortly.

Get signed up as a Payer