Medisolv’s ENCOR Software Earns ONC Health IT CURES Certification

About Medisolv

Medisolv is the leading healthcare quality data management company. Their all-in-one Quality management software, ENCOR, provides tools that help healthcare organizations with core measure abstraction, electronic measure capture in the hospital and ambulatory settings, data aggregation from multiple sources and submission to various reporting entities including CMS, TJC, other payers, state entities and reporting organizations such as ACOs.

ENCOR is 2015 Edition ONC certified for all ambulatory and hospital electronic clinical quality measures (eCQMs) and Medisolv is a 2020 CMS approved MIPS Qualified Registry. Medisolv is an acceptable ORYX® vendor for The Joint Commission.

For more information about Medisolv, visit www.medisolv.com.

About Drummond Group LLC

Drummond Group LLC is a global software test and certification lab that serves a wide range of vertical industries. In healthcare, Drummond tests and certifies Controlled Substance Ordering Systems (CSOS), Electronic Prescription of Controlled Substances (EPCS) software and processes, and Electronic Health Records (EHRs) – designating the trusted test lab as the only third-party certifier of all three initiatives designed to move the industry toward a digital future. Drummond was founded in 1999 and is an ONC-Accredited Certification Body (ACB) and an Authorized Test Lab (ATL) and continues to build on its deep experience and expertise to deliver reliable and cost-effective services. For more information, please visit http://www.drummondgroup.com.

MANDATORY DISCLOSURE LANGUAGE

Costs or Fees
This certified product-version requires a one-time standard implementation fee, with subsequent annual subscription fees for reporting purposes. For the hospital measures, the subscription fee is per-measure-selected. For the ambulatory measures, the subscription fee is per-measure-selected and per-number-of-providers-selected. Additional fees may be required when the client requires customized data integration services.

This product can be hosted either on-premises or in the cloud (hosted by Medisolv); when hosted in the cloud, additional hosting fees may apply.

This product, when digitally integrated with EMR (Electronic Medical Record) systems, requires access to the EMR data system(s), most frequently a primary, secondary, or tertiary database and/or various API endpoints.

 Additional fees may apply in cases where the EMR charges for the required access; in these cases, Medisolv passes the EMR fee through to the client as part of the contractual service.

Technical Details
For this certified product-version to be used on-premises in a client-hosted environment, MongoDB, Microsoft SQL Server, and Microsoft Active Directory need to be installed. MongoDB has no additional cost, provided the client is willing to use the open-source license model of MongoDB; licensing for other versions of MongoDB (e.g., Enterprise) may incur additional cost. Licensing for Microsoft SQL Server and Microsoft Active Directory may or may not require additional cost, depending on the client IT systems.

170.315(d)(12) and 170.31S(d)(13) requires the use of a properly setup directory server. On-Premise installations require the use of Microsoft Active Directory (client control), and proper encryption and MFA (Multi-Factor Authentication) support is fully available, provided the client has it properly configured within their Active Directory installation. Cloud installations require the use of either Microsoft Azure Active Directory B2C (Medisolv control), or SAML/SSO bindings to client local directory systems (client control). Medisolv offers MFA when using Microsoft Azure Active Directory B2C upon client request (not enabled by default), and it requires the use of a cell phone by end-users to receive the token(s). When using SSO/SAML, encryption and MFA are optionally supported; support requires that the client/hosting entity configure their directory system for encryption and MFA.

Multi-Factor-Authentication (MFA) Use-Cases
Encor-E version 6 supports optional Multi-Factor Authentication for all user classes, roles, and application access if requested (for Azure B2C hosting options, where Medisolv handles authentication} or if implemented by the client in the client's directory services (for hosting options that utilize SAML/SSO).

For Azure B2C integration options, MFA is handled during centralized login and authentication, and is not implemented on a per-user basis; it is either on for all users, or off for all users, within a single instance of the Encor-E software product.

For SSO/SAML hosting options, it is in the purview of the client/directory-control-officer to dictate how MFA is applied. SSO/SAML uses the client directory setup, including all MFA options, and can (at the client's decision) be segregated on a per-user basis. Encor-E does not make any decisions regarding MFA in an SSO/SAML environment, so all control resides with the directory-controller regarding whom, how frequently, and in what manner MFA is applied to user authentication. 

For on-premises hosting options, MFA is offered using Microsoft Active Directory, and it is in the purview of the client/directory-control-officer to dictate how MFA is applied. On-Premise's hosting uses the client directory setup, including all MFA options, and can (at the client's decision} be segregated on a per-user basis. Encor-E does not make any decisions regarding MFA in an on-premises environment, so all control resides with the directory­ controller regarding whom, how frequently, and in what manner MFA is applied to user authentication.