Accreditations & Certifications
The most accredited and certified HISP
As the most accredited and certified HISP, RosettaHealth is committed to maintaining rigorous industry standards for privacy, security, and the secure exchange of healthcare information. Our extensive certifications provide independent validation of the policies, procedures, technical capabilities, and security practices supporting our interoperability solutions, enabling you to easily meet your healthcare messaging objectives.
RosettaHealth goes even further, hosting our infrastructure in a HITRUST certified AWS datacenter, ClearData. With HealthBus/HISPDirect, security is ensured.
DirectTrust.org Accredited
RosettaHealth is fully accredited by DirectTrust for:
Privacy and Security
Health Information Service Provider (HISP)
These accreditations demonstrate RosettaHealth's commitment to meeting rigorous industry standards for privacy, security, cybersecurity, operational practices, and the secure exchange of healthcare information.
As a DirectTrust-accredited HISP, RosettaHealth's HealthBus/HISPDirect platform supports secure Direct messaging and trusted exchange with participating healthcare organizations.
RosettaHealth's current DirectTrust accreditations are valid through February 2027.
ONC Modular Certified EHR
ONC Certification Criteria for Health IT
This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
HISPDirect was certified to the following criteria for Modular EHR certification:
| Developer Name | RosettaHealth |
|---|---|
| Product Name | HISPDirect |
| Product Version | V3.0 |
| Website | www.RosettaHealth.com |
| Contact Info | info@RosettaHealth.com |
| Certification Date | November 13, 2017 |
| Certification Number(s) | 15.04.04.2995.HISP.03.00.0.171113 |
| Certification Criteria | 170.315 (d)(1-3, 12-13); (g)(4-5); (h)(2) |
| Clinical Quality Measures Tested | None |
| Additional Software Required | None |
Real World Testing:
Cost and Considerations:
Fees for HISPDirect support of the Direct Protocol Transport (170.315.d.1-3, g.4-5, h.2) are one time startup fee, one time connection fee(s), annual certificate, and annual/monthly subscription fees included in a service agreement.
Subscription fee options include provider, hospital, NHSN, and data accounts.
One time startup fee is charge to establish a platform account, provision and delegate a subdomain, and procure an initial top level DirectTrust certificate for account administration.
One time connection fee(s) will be charged for advanced connections (XD, VPN, etc.).
Most clients remove messages from HISPDirect. Accounts which retain information for long periods maybe required to purchase additional storage.
Pursuant to our security policies, the Direct messaging capability is restricted and users will be unable to exchange messages with users of third-party HISPs with whom we do not have a trust agreement.
HISPDirect is, and will remain, a member of the DirectTrust Accredited Trust Community. As a member of this community, all users will be able to exchange with any Direct account that is part of this community. Should a provider wish to establish a new connection that is not part of this community, provider must lodge a service request on the RosettaHealth Support Portal identifying the third-party party HISP along with contact information for the HISP. We will establish, maintain and support technology to manage these connections. Third-party HISPs must agree to our connection and trust agreement. We will make every effort in good faith to establish such connectivity within a reasonable time frame (general a few days, but rarely longer than a few weeks).
RosettaHealth does not impose any contractual, technical or practical restrictions to the use of Direct messaging to securely communicate with other Direct messaging users or systems.