— Verification policy · v 4.2

Three steps.
One standard:
absolute compliance.

Element MD is a compliant telehealth platform, not an open marketplace. We verify—to a rigorous clinical standard—that every patient is correctly identified, medically reviewed, and legally prescribed. Below is exactly how we handle identity checks, medical intakes, and pharmacy routing to protect you. Most patients complete setup in under five minutes.

Effective May 06, 2026 Compliance HIPAA & State Telehealth Patient setup Under 5 mins
— Tier 1

Standard Patient

Default patient tier. The patient completes a comprehensive medical intake form online, confirming their identity and medical history. The intake is routed to a state-licensed clinician for review and prescription.

— Plan limit Clinician-determined supply · max 90 days
  • Identity match against state records
  • Asynchronous medical intake form
  • State telehealth eligibility check
  • Co-branded clinic portal
  • Patient flow analytics
Recommended
— Tier 2

Practitioner Partner

For verified chiropractors and licensed clinicians recommending therapies to their own patients. Upload an active practice license — we verify against the issuing body to unlock your custom referral pipeline.

— Partnership terms Zero inventory · direct-to-patient shipping
  • Everything in Tier 1 for your patients
  • NPI / State practice license verified
  • Direct-to-patient cold chain shipping
— Tier 3

Enterprise Network

For multi-location practices and health networks. We confirm corporate registry and establish API endpoints to tie patient onboarding directly into your existing EMR/EHR system.

— Partnership terms EMR integration · bulk patient onboarding
  • Everything in Tier 2
  • Multi-location practice verification
  • Custom EMR/EHR API integration
  • HIPAA-compliant data handoffs
  • Dedicated partner success manager

1 · What we ask

For Standard Patients (Tier 1), we collect: legal name, contact info, shipping address, government-issued ID, and a comprehensive medical intake form. For Practitioner Partners (Tier 2), we require an active state practice license or NPI number. For Enterprise Networks (Tier 3), we require corporate registry details and an executed B2B platform agreement.

We use secure, HIPAA-compliant flows. We never ask for sensitive financial data via email. If a communication claiming to be Element MD asks for unsecured data, do not provide it.

2 · Why we ask it

Federal and state telehealth laws require the establishment of a legitimate clinician-patient relationship before any prescription can be issued. For our clinic partners, verifying practice credentials ensures that our platform remains a secure, closed network that protects your liability and complies with state pharmacy dispensing rules. Verifiable identity and complete medical histories keep patient care safe and legal.

3 · How we review

Tier 1 patient intakes are reviewed asynchronously by a board-certified clinician licensed in the patient's state. Tier 2 practitioner credentials are verified by our compliance team against primary sources (state medical or chiropractic board registries) within one business day. Tier 3 enterprise onboarding is handled by our dedicated partnership success team.

If an intake requires clarification, the prescribing clinician will message the patient directly through our secure portal.

4 · Denials & restrictions

We restrict or deny patient accounts if they fail identity verification, reside in a state where telehealth laws or pharmacy licensing prohibits fulfillment, or if the reviewing clinician determines the requested medications medically contraindicated. Practitioner partner applications are denied if credentials cannot be verified or are not in active, good standing. You may appeal compliance holds by contacting our support team.

5 · Retention & Security

All patient medical records, intake forms, and practitioner credentials are encrypted at rest and in transit. We retain these records in strict accordance with HIPAA guidelines and state medical and pharmacy board recordkeeping requirements. Medical data is accessible only to the prescribing clinicians and authorized compliance personnel.

6 · Sharing & subpoena

Patient health information is never sold, nor is it shared with third-party advertisers or affiliates. We share records only with our partner ScriptfulRX strictly for the purpose of fulfilling a prescription, or when lawfully ordered by a court or regulatory body with jurisdiction.