ONC Health IT Disclosures

“This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.”

There are no additional types of costs that a user may be required to pay to implement or use this Certified Health IT’s capabilities, whether to meet provisions of HHS programs requiring the use of certified health IT or to achieve any other use within the scope of this health IT’s certification.

Product Details

Empower, Version 6.4

  • Vendor Name: WellStack, Inc.
  • Date Certified: November 5, 2019
  • Product Name and Version: Empower, Version 6.4
  • Certification ID:
  • Certification Criteria:
    • 170.315 (b)(10): Electronic Health Information export
    • 170.315 (d)(1): Authentication, Access Control, Authorization
    • 170.315 (d)(2): Auditable Events and Tamper-Resistance
    • 170.315 (d)(3): Audit Report(s)
    • 170.315 (d)(5): Automatic Access Time-out
    • 170.315 (d)(6): Emergency Access
    • 170.315 (d)(7): End-User Device Encryption
    • 170.315 (d)(9): Trusted Connection
    • 170.315 (d)(12): Encrypt Authentication Credentials
    • 170.315 (d)(13): Multi-factor Authentication
    • 170.315 (e)(1)*: View, Download, and Transmit to 3rd Party
    • 170.315 (e)(3): Patient Health Information Capture
    • 170.315 (g)(1): Automated Numerator Recording
    • 170.315 (g)(4): Quality Management System
    • 170.315 (g)(5): Accessibility-Centered Design
    • 170.315 (g)(6): Consolidated CDA creation performance
    • 170.315 (g)(7): Application Access – Patient Selection
    • 170.315 (g)(9): Application Access – All Data Request
    • *(e)(1): Relied Upon Software includes EMR Direct, Version 2023 and Medline Plus, version updated on May 7, 2018
    • 170.315 (b)(10) EHI Export Documentation
  • BlueButtonPRO supports the export of EHI as follows:1. FHIR Bulk Export Format: The user can export all available structured data through FHIR APIs as outlined in our swagger documentation. The output format is based on the FHIR Bulk data standard2. For non-FHIR resources, BlueButtonPRO supports the export as DocumentReference resource types. This resource can be used with any file, including CCDA.
  • Compliance with Multi-factor authentication 170.315(d)(13) – This Health IT Module supports multi-factor authentication by requiring the user to answer challenge questions to prove their identity before getting access to the patient portal and can be configured to also require portal user to answer challenge questions every time they access the patient portal.

WellStack – Empower™ Patient Portal & Engagement Suite

ONC CERTIFIED HIT® is a registered trademark of HHS.