Nothing is sent but the NPI. The draft is checked in your browser and never leaves it. The NPI, a public number, is looked up in the CMS registry. Use synthetic or de-identified text only. Nothing is saved.
1. The draft
What a signature would attach to, and what a machine can flag first.
2. The signer
Is this person someone who can sign this case?
3. The record
What was checked, fingerprinted. The draft is carried only as its SHA-256.
A signed decision is a different thing: it is made in the review console and anchored to a public ledger. Check a signed decision.
The rules and where they come from
- NPI check digit: CMS, Requirements for the NPI check digit.
- Status, credential, specialty and licence states: the CMS NPPES registry API. The clinician supplies these fields and must report changes within 30 days (45 CFR 162.410(a)(4)). The state medical board’s lookup is the record of a licence.
- Specialty match and the licence-and-coverage rule: ClinicalSwipe’s own routing gate, which fails closed. They are our policy, not law.
- The draft checks are the same ones the review console shows a reviewer. They test the draft’s form, never whether it is clinically right.