The full definition
EPCS allows prescribers to send prescriptions for controlled substances electronically instead of by paper or fax. To send an EPCS prescription a provider must complete DEA 1311-compliant identity proofing (IAL2 level) and authenticate at the point of prescribing with two-factor authentication (AAL2 level — typically a password plus a hardware token or biometric). Every EPCS event must be logged in a tamper-resistant audit trail.
Why it matters in practice
Most US states now require EPCS for controlled substance prescriptions. CMS requires EPCS for all Schedule II–V prescriptions covered under Medicare Part D as of 2023. Behavioral health, addiction treatment, and psychiatry practices write enough controlled substances that EPCS certification is now table-stakes for any ePrescribe vendor serving these specialties.
Real-world examples
- Psychiatrists prescribing Adderall (Schedule II) for ADHD
- Addiction treatment providers prescribing buprenorphine (Schedule III) for OUD
- Pain management physicians prescribing oxycodone (Schedule II)
Inside Velant
Velant ePrescribe is Surescripts-certified for EPCS in all 50 states with DEA 1311 identity proofing, PDMP integration, formulary lookup, and drug interaction checks. $75/mo per prescriber with volume discounts at 5+ and 10+.
Related terms
- SurescriptsThe dominant US e-prescription network, connecting approximately 1.7 million prescribers to 67,000 pharmacies — essentially the only path to send e-prescriptions in the United States.
- DEA 1311 (21 CFR Part 1311)The DEA regulation governing electronic prescribing of controlled substances, including identity proofing, two-factor authentication, biometric standards, hardware token requirements, and audit logging.
- PDMP (Prescription Drug Monitoring Program)A state-run electronic database of controlled substance prescriptions, used to identify patient misuse, doctor-shopping, and inappropriate prescribing patterns.
- HIPAA-Compliant CRMA customer relationship management system designed to handle Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996.