CERTIFICATIONS FOR SUCCESS: STAYING AHEAD SO OUR CLIENTS CAN TOO
NextGen Healthcare clients have the confidence of knowing that our products meet the most rigorous healthcare IT standards, so they can more easily:
- Participate in quality reporting and EHR incentive programs
- Engage patients in their care
- Exchange health information across the care continuum
- Secure electronic patient health information
- Succeed in an increasing value-based healthcare system
NextGen® Direct Messaging 2.14 (formerly called Mirth Mail)
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Next.02.03.0.201218, Certification Date: June 20, 2023
Modules Tested: 170.315 (d)(1-3); (d)(12-13); (g)(4,5); (h)(2)
Clinical Quality Measures tested: None
Additional software used: None
Mandatory Disclosure:
NextGen Direct Messaging licensing is a Tiered Annual subscription fee, based on number
of
unique
Mailboxes. Additional fees may apply for security Certificates issued by our CA partner
DigiCert.
Security certificates cost are recurring, based on a term of 1 or 2 years of the client's choosing.
The annual subscription cost includes all required functionality to integrate with other systems using XDR and/or SMTP, and a Webmail UI that allows users to exchange messages with other Direct Trust approved addresses, as well as administrator functionality to control the number of approved and active Mailboxes (Direct Addresses) used. The contract defines the number of unique Mailboxes (Direct Addresses) allowed but does not limit the implementation or use of the certified capabilities.
Additional Security Certificates are required for each organizational sub-domain defined by the client.
NextGen® Direct Messaging 2.13 (formerly called Mirth Mail)
The Health IT module(s) is 2015 Edition Cures compliant and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Next.02.03.0.201218, Certification Date: 12/18/2020 Program: 2015 Edition Cures Update
Modules Tested: 170.315 (d)(1-3); (d)(12-13); (g)(4,5); (h)(2)
Clinical Quality Measures tested: None
Additional software used: None
Mandatory Disclosure:
NextGen Direct Messaging licensing is a Tiered Annual subscription fee, based on number
of
unique
Mailboxes. Additional fees may apply for security Certificates issued by our CA partner
DigiCert.
Security certificates cost are recurring, based on a term of 1 or 2 years of the client's choosing.
The annual subscription cost includes all required functionality to integrate with other systems using XDR and/or SMTP, and a Webmail UI that allows users to exchange messages with other Direct Trust approved addresses, as well as administrator functionality to control the number of approved and active Mailboxes (Direct Addresses) used. The contract defines the number of unique Mailboxes (Direct Addresses) allowed but does not limit the implementation or use of the certified capabilities.
Additional Security Certificates are required for each organizational sub-domain defined by the client.
NextGen® Enterprise EHR (versions 5.9.1 – 6.2022.1 and NextGen® Ambulatory EHR version 5.9)
2022
2023
2024
2025
NextGen® Office (version 5.0)
2022
2023
2024
2025
Medfusion Patient Portal (version 21)
2022
NextGen PxP Portal (version 23)
2023
Test Results
NextGen Direct Messaging (versions 2.12 – 2.14 and Mirth Mail 2.10)
2022
2023
2024
2025
NextGen Mirth Connect (versions 4.5 and 4.4.2)
2025
ONC 2014 Edition
NextGen Ambulatory EHR Version 5.8.3
NextGen Ambulatory EHR Version 5.8.3 is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(a)(1) 170.314(a)(2) 170.314(a)(3) 170.314(a)(4) 170.314(a)(5) 170.314(a)(6) 170.314(a)(7) 170.314(a)(8) 170.314(a)(9) 170.314(a)(10) 170.314(a)(11) 170.314(a)(12) 170.314(a)(13) 170.314(a)(14) 170.314(a)(15) 170.314(b)(1) 170.314(b)(2) 170.314(b)(3) 170.314(b)(4) 170.314(b)(5) 170.314(b)(7) 170.314(c)(1) 170.314(c)(2) 170.314(c)(3) 170.314(d)(1) 170.314(d)(2) 170.314(d)(3) 170.314(d)(4) 170.314(d)(5) 170.314(d)(6) 170.314(d)(7) 170.314(d)(8) 170.314(d)(9) 170.314(e)(2) 170.314(e)(3) 170.314(f)(1) 170.314(f)(2) 170.314(f)(3) 170.314(f)(5) 170.314(f)(6) 170.314(g)(2) 170.314(g)(3) 170.314(g)(4)
CQMs: CMS#2v2v3 CMS#22v2 CMS#50v1v2 CMS#52v2 CMS#56v2 CMS#61v3 CMS#62v2 CMS#64v3 CMS#65v3 CMS#66v2 CMS#68v3 CMS#69v1v2 CMS#74v3 CMS#75v1v2 CMS#77v2 CMS#82v1 CMS#90v2v3 CMS#117v1v2 CMS#122v2 CMS#123v2 CMS#124v2 CMS#125v2 CMS#126v2 CMS#127v2 CMS#128v2 CMS#129v3 CMS#130v2 CMS#131v2 CMS#132v2 CMS#133v2 CMS#134v2 CMS#135v2 CMS#136v2v3 CMS#137v2 CMS#138v1v2 CMS#139v2 CMS#140v1v2 CMS#141v3 CMS#142v2 CMS#143v2 CMS#144v2 CMS#145v2 CMS#146v1v2 CMS#147v2 CMS#148v2 CMS#149v2 CMS#153v1v2 CMS#154v1v2 CMS#155v1v2 CMS#156v1v2 CMS#157v2 CMS#158v2 CMS#159v2 CMS#160v2 CMS#161v2 CMS#163v2 CMS#164v2 CMS#165v1v2 CMS#166v2v3 CMS#167v2 CMS#169v2 CMS#177v2 CMS#179v2 CMS#182v3
Mandatory Disclosure:
Patient Portal: Customers licensing the portal for the first time pay a one-time software
licensing
fee
per provider, and a per-month/per provider subscription fee for access to portal and support.
Customers
who
have already licensed the portal, pay no additional charges associated with added functionality
for
meaningful use but continue to pay their usual monthly subscription fees at the contracted rate.
External Connectivity Solutions: Interfaces for laboratory, cancer registry reporting, specialized registry reporting, immunization registry reporting and syndromic surveillance reporting require a software license fee, implementation fee and an annual support fees. The Bulk C-CDA Export Utility requires billable hours for set-up, configuration and client training.
Healthwise: For patient education is optional and carries additional per provider per year cost.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
ONC-ACB Certification ID: 14.07.04.2054.Next.83.1.01.181101, Date of certification: November 1, 2018
The additional software NextGen Ambulatory EHR Version 5.8.3 relied upon to demonstrate compliance includes NextGen® Health Quality Measures (NextGen HQM) and Rosetta interface engine.
Mirth Connect Version 3.4 — Ambulatory
Mirth Connect Version 3.4 — Ambulatory is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.4A.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.4 — Inpatient
Mirth Connect Version 3.4 — Inpatient is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.4I.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.3 — Ambulatory
Mirth Connect Version 3.3 — Ambulatory is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 4.07.04.2054.Mirt.3A.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.3 — Inpatient
Mirth Connect Version 3.3 — Inpatient is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(4) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.3I.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
NextGen EDR Version 5.0
NextGen EDR Version 5.0* is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
(Certified criteria and CQMs and pricing transparency information are the same as listed above for NextGen Ambulatory EHR Version 5.8.3.)
ONC-ACB Certification ID: 14.07.04.2054.Next.05.01.1.181101, Date of certification: November 1, 2018
NextGen Ambulatory EHR Version 5.8.2
NextGen Ambulatory EHR Version 5.8.2 is also 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
(Certified criteria and CQMs and pricing transparency information are the same as listed above for Version 5.8.3.)
ONC-ACB Certification ID: 14.07.04.2054.Next.82.1.01.181101, Date of certification: November 1, 2018
NextGen Ambulatory EHR Version 5.8.1
NextGen Ambulatory EHR Version 5.8.1 is also 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
(Certified criteria and CQMs and pricing transparency information are the same as listed above for Version 5.8.3.)
ONC-ACB Certification ID: 14.07.04.2054.Next.58.01.1.181101, Date of certification: November 1, 2018
NextGen Ambulatory EHR Version 5.8.0.77
NextGen Ambulatory EHR Version 5.8.0.77 is also 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
(Certified criteria and pricing transparency information are the same as listed above for Version 5.8.3.)
CQMs: CMS#2 CMS#22 CMS#50 CMS#52 CMS#56 CMS#61 CMS#62 CMS#64 CMS#65 CMS#66 CMS#68 CMS#69 CMS#74 CMS#75 CMS#77 CMS#82 CMS#90 CMS#117 CMS#122 CMS#123 CMS#124 CMS#125 CMS#126 CMS#127 CMS#128 CMS#129 CMS#130 CMS#131 CMS#132 CMS#133 CMS#134 CMS#135 CMS#136 CMS#137 CMS#138 CMS#140 CMS#141 CMS#142 CMS#143 CMS#144 CMS#145 CMS#146 CMS#147 CMS#153 CMS#154 CMS#155 CMS#156 CMS#163 CMS#164 CMS#165 CMS#166 CMS#182
ONC-ACB Certification ID: 14.07.04.2054.Next.77.01.1.181101, Date of certification: November 1, 2018
The additional software NextGen Ambulatory EHR Version 5.8.0.77 and 5.8.1 relied upon to demonstrate compliance includes NextGen© Health Quality Measures (NextGen HQM) and Rosetta interface engine.
Mirth Connect Version 3.2 – Ambulatory
Mirth Connect Version 3.2 – Ambulatory is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.2A.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.2 – Inpatient
Mirth Connect Version 3.2 – Inpatient is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.2I.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.1 – Ambulatory
Mirth Connect Version 3.1 – Ambulatory is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.1A.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
Mirth Connect Version 3.1 – Inpatient
Mirth Connect Version 3.1 – Inpatient is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
Criteria: 170.314(f)(2) 170.314(f)(3) 170.314(f)(6) 170.314(g)(4)
ONC-ACB Certification ID: 14.07.04.2054.Mirt.1I.01.0.181101, Date of certification: November 1, 2018
Mandatory Disclosure:
No additional costs beyond standard licensing.
Known Limitations
There are no known limitations that a user may encounter in the course of implementing and
using
this
[Complete EHR or Health IT Module]'s capabilities, whether to meet meaningful use objectives and
measures or
to achieve any other use within the scope of the health IT's certification.
NextGen EDR Version 4.3
NextGen EDR Version 4.3* is 2014 Edition compliant and has been certified by ICSA Labs in accordance with applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent and endorsement by the U.S. Department of Health and Human Services.
(Certified criteria and CQMs and pricing transparency information are the same as listed above for NextGen Ambulatory EHR Version 5.8.3.)
ONC-ACB Certification ID: 14.07.04.2054.Next.43.01.1.181101, Date of certification: November 1, 2018
* The additional required software NextGen EDR Version 5.0, QSIDental CPS Version 4.4, QSIDental Web 2.3.0 relied upon to demonstrate compliance is NextGen Ambulatory EHR Version 5.8.2, 5.8.1 or 5.8.0.77
NCQA Prevalidation
NextGen® Enterprise EHR is NCQA Prevalidated for:
- NCQA PCMH 2017
- NCQA PCSP 2016
NextGen® Office EHR is NCQA Prevalidated for:
- NCQA PCMH 2017
NCQA Prevalidation includes a rigorous evaluation of a submitted health IT solution’s functionality including, but not limited to, reporting functions, report examples, screen shots, live demonstrations, and other relevant documentation. Based on the review of information submitted above, NCQA approves or declines autocredit based on factor-level requirements and designates for which factors a product is able to “support” practices.
NextGen® Enterprise EHR Version 5.8.1 and 5.9 are prevalidated by NCQA to receive automatic credit toward NCQA’s PCMH 2017 and PCSP 2016 scoring. NextGen® Enterprise EHR Version 5.8.1 and 5.9 also received a supporting designation for PCMH 2017 and PCSP 2016. Autocredit is transferrable to NextGen Healthcare client practices seeking NCQA’s PCMH or PCSP Recognition. Eligible client practices must be actively utilizing the reviewed capabilities associated with NextGen Healthcare’s PCMH or PCSP prevalidated products to be eligible for transfer of awarded autocredit.
NextGen® Office EHR Version 5.0 is prevalidated by NCQA to receive automatic credit toward NCQA’s PCMH 2017 scoring. NextGen® Office Version 5.0 also received a supporting designation for PCMH 2017. Autocredit is transferrable to NextGen Healthcare client practices seeking NCQA’s PCMH or PCSP Recognition. Eligible client practices must be actively utilizing the reviewed capabilities associated with NextGen Healthcare’s PCMH prevalidated products to be eligible for transfer of awarded autocredit.
HITRUST CSF® Certification
Validates Commitment to Meet Regulations and Protect Sensitive Information
NextGen Healthcare understands the importance of keeping our client and their patient’s data secure and private. But we understand clients and their patients want more than a vendor’s assurance. They want the peace of mind that comes with the most reputable data protection in the industry.
This is why NextGen Healthcare invested significant time and resources to implement and become certified as compliant with the HITRUST Common Security Framework (CSF). HITRUST CSF is the leading data protection standards development and certification organization that offers the most widely adopted security framework in the U.S. healthcare industry; and, HITRUST certification is required by some of the major payers. This risk and compliance-based framework leverages globally recognized standards that include HIPAA, NIST, ISO, PCI, FTC, and COBIT.
Clients can take comfort that their patients’ data and privacy are supported with the most security possible. HITRUST certification demonstrates that NextGen Healthcare has policies and practices that are designed, maintained and enforced with utmost detail to securely protect our clients and their patients’ information.
View HITRUST certification
To view our certification:
- Current NextGen Healthcare clients can download NextGen Healthcare’s current HITRUST certification when they visit the Success Community. This includes evidence of our SO3 compliance. Read now
- Non-clients can contact NextGen Healthcare at security@nextgen.com or contact HITRUST directly for evidence of NextGen Healthcare’s compliance.
NextGen® Enterprise EHR Enterprise 8
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Next.80.11.1.230620, Certification Date: June 20, 2023
Modules Tested: 170.315 (a)(1-5,12, 14-15); (b)(1-3,9,10-11); (c)(1-4); (d)(1-13); (e)(1,
3); (f)(1-2, 4-5, 7); (g)(2-7, 9-10); (h)(1)
Clinical Quality Measures tested: 2v6; 22v5; 50v5; 52v5; 56v5; 65v6; 66v5; 68v6; 69v5; 74v6;
75v5; 82v4; 90v6; 117v5; 122v5; 123v5; 124v5; 125v5; 127v5; 128v5; 129v6; 130v5; 131v5;
132v5; 133v5; 134v5; 135v5; 136v6; 137v5; 138v5; 139v5; 142v5; 143v5; 144v5; 145v5; 146v5;
147v6; 149v5; 153v5; 154v5; 155v5; 156v5; 157v5; 158v5; 159v5; 160v5; 161v5; 164v5; 165v5;
166v6; 167v5; 169v5; 177v5; 249v3; 347v1; 349v2; CMS645v3
Additional software used: NextGen® (HQM),
NextGen® Rosetta Interface
Messenger, First Databank (FDB) Drug Interaction Database,
NextGen® Share, NextGen® Patient Access API, NextGen® FHIR API,
Medfusion Patient Portal
(NextGen® PxP Portal) and Surescripts.
Mandatory disclosures:
Costs for NextGen® Rosetta Interface Messenger, NextGen® Share,
NextGen® Patient Access API,
NextGen® FHIR API, and Surescripts are included in the standard software licensing
package
and are covered by the standard software maintenance fees. NextGen® HQM is available
at
no
additional cost to clients under the HQM Reporting Services Schedule contract addendum.
Clients opting out of this addendum may be assessed a fee for use of the HQM portal.
NextGen® Enterprise EHR utilizes First Databank (FDB) Drug Interaction Database for medication, allergy and immunization data to support the medication and order module functionality in the application. First Databank (FDB) Drug Interaction Database users pay an annual per provider license fee to NextGen as part of their NextGen licensing package.
Medfusion Patient Portal (NextGen® PxP Portal): Customers licensing the portal for the first time pay a one-time setup fee and a per-month/per-provider subscription fee for access to the portal and support. Customers who have already licensed the portal continue to pay their usual monthly subscription fees at the contracted rate.
External connectivity solutions: Interfaces for laboratory, cancer registry reporting, specialized registry reporting, immunization registry reporting, syndromic surveillance reporting, electronic case reporting, Health Care Surveys and CAHPS MIPS Survey require a software license fee, implementation fee and an annual support fee.
Updated Standards:
|
Standard Updated |
Interoperability Impact |
Certification Impact |
|
2024 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2023 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
NextGen® Enterprise EHR 6.2021.1 Cures
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Next.60.10.1.220318, Certification Date: March 18, 2022
Modules Tested: 170.315 (a)(1-5,12,14-15); (b)(1-3,9,10-11); (c)(1-4); (d)(1-13); (e)(1,3);
(f)(1,2,4,5,7);
(g)(2-7,
9-10); (h)(1)
Clinical Quality Measures tested: 2v6; 22v5; 50v5; 52v5; 56v5; 65v6; 66v5; 68v6; 69v5; 74v6;
75v5;
82v4;
90v6;
117v5; 122v5; 123v5; 124v5; 125v5; 127v5; 128v5; 129v6; 130v5; 131v5; 132v5; 133v5; 134v5;
135v5;
136v6;
137v5;
138v5; 139v5; 142v5; 143v5; 144v5; 145v5; 146v5; 147v6; 149v5; 153v5; 154v5; 155v5; 156v5;
157v5;
158v5;
159v5;
160v5; 161v5; 164v5; 165v5; 166v6; 167v5; 169v5; 177v5; 249v3; 347v1; 349v2; 645v3
Additional software used: NextGen® HQM, NextGen® Rosetta Interface
Messenger,
First
Databank (FDB) Drug Interaction
Database, NextGen® Share, NextGen®
Patient
Access
API, NextGen® FHIR API, Medfusion Patient
Portal (NextGen® PxP Portal) and Surescripts
Mandatory disclosures:
Mandatory disclosures:
Costs for NextGen® Rosetta Interface Messenger, NextGen® Share,
NextGen® Patient Access API, NextGen® FHIR API, and
Surescripts are included in the standard software licensing package and are covered by the
standard
software
maintenance fees. NextGen® HQM is available at no additional cost to clients under
the
HQM
Reporting
Services
Schedule contract addendum. Clients opting out of this addendum may be assessed a fee for use of
the
HQM
portal.
NextGen® Enterprise EHR utilizes First Databank (FDB) Drug Interaction Database for medication, allergy and immunization data to support the medication and order module functionality in the application. First Databank (FDB) Drug Interaction Database users pay an annual per provider license fee to NextGen as part of their NextGen licensing package.
Medfusion Patient Portal (NextGen® PxP Portal): Customers licensing the portal for the first time pay a one-time setup fee and a per-month/per-provider subscription fee for access to the portal and support. Customers who have already licensed the portal continue to pay their usual monthly subscription fees at the contracted rate.
External connectivity solutions: Interfaces for laboratory, cancer registry reporting, specialized registry reporting, immunization registry reporting, syndromic surveillance reporting, electronic case reporting, Health Care Surveys and CAHPS MIPS Survey require a software license fee, implementation fee and an annual support fee.
Updated Standards:
|
Standard Updated |
Interoperability Impact |
Certification Impact |
|
2024 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2023 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2022 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2021 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
NextGen® Office 5.0
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of the U.S. Department of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Medi.05.00.1.180220 Date Certified: 02/20/2018
Modules Tested: (a)(1-5,12,14) (b)(1-3,10-11); (c)(1-4); (d)(1-9,12-13); (e)(1,3); (f)(1,5);
(g)(2-7,9-10);
(h)(1)
Clinical Quality Measures tested: 2v6; 22v5; 50v5; 68v6; 69v5; 74v6; 75v5; 90v6; 117v5;
122v5;
124v5;
125v5;
127v5; 128v5; 130v5; 131v5; 134v5; 135v5; 136v6; 137v5; 138v5; 139v5; 144v5; 145v5; 146v5;
147v6;
149v5;
153v5;
154v5; 155v5; 156v5; 159v5; 161v5; 165v5; 177v5
Additional software used: Surescripts, Microsoft Excel and YourHealthFile.com
Mandatory Disclosure:
NextGen Office clients pay a per-provider fee which includes the following additional software: Surescripts, YourHealthFile.com.
Interfaces for laboratory and immunization registry reporting require a software license fee, an implementation fee, and a monthly maintenance fee. Other fees may apply to migrate data or for other 3rd party HL7 integrations.
Multi-Factor Authentication:
When logging in to NextGen Office users are required to setup MFA for either mobile phone and/or email. A time-based one-time passcode (TOTP) is sent via the applicable method.
Application use:
- Users login with their user name and password
- Users will be required to register a mobile phone and/or an email
- Users will then be asked for their verification code each time they login
Updated Standards:
|
Standard Updated |
Interoperability Impact |
Certification Impact |
|
2023 CMS QRDA Category III IG for Eligible Clinicals/Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2022 CMS QRDA Category III IG for Eligible Clinicals/ Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
|
2021 CMS QRDA Category III IG for Eligible Clinicals/ Professionals |
Allows providers to maintain compliance with CQM attestations to CMS |
Certification maintained |
Mirth Connect 4.5
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.05.05.2054.NGM2.03.02.1.240222, Certification Date: February 22, 2024
Modules Tested: 170.315 (b)(10);(d)(1-3); (d)(5-10); (d)(12-13); (g)(4-5)
Clinical Quality Measures tested: None
Additional software used: Role-Based Access Control extension, Enhanced Bundle extension, Cures
Certification Support extension, SSL Manager extension, and Multifactor Authentication (DUO, TOTP)
extension
Mandatory Disclosure: Mirth Connect Cures Extensions use a tiered annual subscription bundle (Gold and Platinum). These standardized bundles benefit customers using our cost-benefit model defined as a "per server installation" of the extension(s) in production with attributed 3 non-production instances. In comparison, other integration services that charge based on the total number of interfaces and qualified message counts.
Certified functionality requires extensions that can are available through the Gold and Platinum tiers.
Multi-Factor Authentication: Mirth Connect can be configured to require users to use multi-factor authentication to log in to the application. When multi-factor authentication is enabled, in addition to providing a correct username and password, users must authenticate using either a time-based one-time passcode (TOTP) from an authenticator app such as Google Authenticator or they must authenticate using Cisco’s Duo application. If using Duo, users can choose to authenticate via a phone call, a passcode sent through a text message, or a push notification to the Duo mobile app.
Mirth Connect 4.6
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.05.05.2054.NGM3.04.03.1.250321, Certification Date: March 21, 2025
Modules Tested: 170.315 (b)(10);(d)(1-3); (d)(5-10); (d)(12-13); (g)(4-5)
Clinical Quality Measures tested: None
Additional software used: Role-Based Access Control extension, Enhanced Bundle
extension, Cures Certification Support extension, SSL Manager extension, and Multifactor
Authentication (DUO, TOTP) extension
Mandatory Disclosure: Mirth Connect Cures Extensions use a tiered annual subscription bundle (Gold and Platinum). These standardized bundles benefit customers using our cost-benefit model defined as a "per server installation" of the extension(s) in production with attributed 3 non-production instances. In comparison, other integration services that charge based on the total number of interfaces and qualified message counts.
Certified functionality requires extensions that can are available through the Gold and Platinum tiers.
Multi-Factor Authentication: Mirth Connect can be configured to require users to use multi-factor authentication to log in to the application. When multi-factor authentication is enabled, in addition to providing a correct username and password, users must authenticate using either a time-based one-time passcode (TOTP) from an authenticator app such as Google Authenticator or they must authenticate using Cisco’s Duo application. If using Duo, users can choose to authenticate via a phone call, a passcode sent through a text message, or a push notification to the Duo mobile app.
NextGen® Direct Messaging 2.14 (formerly called Mirth Mail)
This Health IT module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Holds Certificate No: 15.04.04.2054.Next.02.04.0.210812, Certification Date: 8/12/2021
Modules Tested: 170.315 (b)(10); (d)(1-3); (d)(12-13); (g)(4,5); (h)(2)
Clinical Quality Measures tested: None
Additional software used: None
Mandatory Disclosure:
NextGen Direct Messaging licensing is a Tiered Annual subscription fee, based on number of
unique
Mailboxes.
Additional fees may apply for security Certificates issued by our CA partner DigiCert.
Security certificates cost are recurring, based on a term of 1 or 2 years of the client's choosing.
The annual subscription cost includes all required functionality to integrate with other systems using XDR and/or SMTP, and a Webmail UI that allows users to exchange messages with other Direct Trust approved addresses, as well as administrator functionality to control the number of approved and active Mailboxes (Direct Addresses) used. The contract defines the number of unique Mailboxes (Direct Addresses) allowed but does not limit the implementation or use of the certified capabilities.
Additional Security Certificates are required for each organizational sub-domain defined by the client.
Intervention Risk Management Practices Summary: NextGen Office EHR AI Scribe
Governance
- Establish an AI governance body to oversee the development, deployment, and monitoring of AI technology in certified products.
- Define clear intended purposes, scope, and monitoring of the AI.
- Implement processes for stakeholder engagement, including clinical, technical, and other subject matter experts, to ensure accountability and transparency.
- Identify how data is acquired, managed, and used.
Risk Analysis
- AI system lifecycle mapping and risk assessments to identify potential harms will be conducted.
- The AI will undergo an assessment to evaluate its potential impact on patients, clinical workflow, financial or operational considerations, and potential risks like fairness, appropriateness, validity, effectiveness, or safety (FAVES), robustness, reliability, intelligibility, security, and privacy.
- Performance and accuracy will be thoroughly validated using appropriate testing methodologies.
Risk Mitigation
- Monitor performance, outcomes, and emerging risks.
- The AI Governance Committee will prioritize and mitigate high-priority risks.