Regulatory & compliance

Built around the rules our customers answer to.

Facilities and pharmacies live under different regulators, so each platform is shaped to the obligations its buyer actually faces. Here is how Veridence and RXLens map to those rules.

Veridence · long-term care

For facilities

HIPAA. Resident PHI is encrypted and access-controlled, and we sign a Business Associate Agreement before any PHI is processed.
CMS and state survey. Event-level records and survey-readiness reports are built to answer the documentation a surveyor asks for.
DEA controlled substances. Hash-chained narcotic records, biennial inventory reconciliation, and diversion monitoring support DEA recordkeeping expectations.
MDS and PDPM. Assessment scheduling and PDPM classification support the reporting that drives reimbursement.

RXLens · pharmacy

For pharmacies

HIPAA. Claims data that carries PHI is encrypted and isolated, and we sign a Business Associate Agreement before processing it.
PBM audit obligations. Findings are traced to the source claim and rule, and appeals packages are built the way PBM audits are actually run.
Extrapolation review. Statistical extrapolation is examined the way payers apply it, so a challenge rests on evidence.
Program applicability. Rules are scoped to the program a claim falls under, so the audit reflects the right requirements.

Common ground

What both platforms share.

HIPAA and BAA

PHI is protected on both platforms, and a Business Associate Agreement is executed before any of it is processed.

SOC 2 Type I complete

Our SOC 2 Type I examination is complete. We are glad to share details under NDA.

Evidence you can defend

Every action and finding is attributed and traceable, so a regulator or payer request is answered from the record.

This page describes how AYAANIS platforms are designed to support our customers' compliance obligations. It is provided for information only and is not legal or regulatory advice. Regulatory requirements vary by state, program, and payer, and compliance remains the responsibility of the facility or pharmacy. Processing protected health information requires an executed Business Associate Agreement.