Office Ally Certifications and Accreditations
Health Insurance Portability & Accountability Act (HIPAA)
The Health Insurance Portability and Accountability Act of 1996, Public Law 104-191, (HIPAA) was passed by Congress to reform the insurance market and simplify health care administration. HIPAA Administrative Simplification aims to reduce the cost and administrative burden of healthcare by adopting and requiring the use of standardized electronic transmission of administrative and financial transactions. The Administrative Simplification also imposes requirements for the protection of protected health information (PHI). Office Ally strictly complies with all HIPAA requirements.
HITRUST CSF Certification
HITRUST champions programs that safeguard sensitive information and manage information risk for healthcare organizations. HITRUST develops, maintains and provides broad access to its widely adopted common risk and compliance management frameworks, related assessments, and assurance methodologies. Office Ally earned HITRUST CSF® Certification and HITRUST Certification of NIST Cybersecurity Framework to manage risk, improve security posture, and meet compliance requirements.
Expiration Date: January 1, 2026
CURES Update ONC-ACB
This Health IT Module(s), EHR 24/7™ is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of the U.S. Department of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services. Office Ally’s EHR 24/7™ is available for a flat monthly fee with the option to add eRx for no additional cost. License fee's may apply for FHIR API Integration. Click here to view certification details.
DirectTrust
DirectTrust™ is a non-profit, vendor-neutral alliance dedicated to instilling trust in the exchange of health data. The organization serves as a forum for a consensus-driven community focused on health communication, an American National Standards Institute (ANSI) standards development organization, an accreditation and certification body through EHNAC (the Electronic Healthcare Network Accreditation Commission), and a developer of trust frameworks and supportive services for secure information exchange like Direct Secure Messaging and trusted, compliant document submission. The goal of DirectTrust is to develop, promote, and, as necessary, help enforce the rules and best practices necessary to maintain privacy, security, and trust for stakeholders across and beyond healthcare.
CAQH CORE® Certification
CAQH®, a nonprofit alliance of health plans and trade associations, is a catalyst for industry collaboration on initiatives that simplify healthcare administration for health plans and providers, resulting in a better care experience for patients and caregivers. The CAQH launched the Committee on Operating Rules for Information Exchange (CORE®)1 to give providers access to patient coverage info before or at the time of service using the electronic system of their choice for any patient or health plan, effectively reducing administrative burden and costs. Office Ally is certified by CAQH CORE for Phases I, II and III, including Real-Time & Batch Eligibility (270/271), Real-Time & Batch Claim Status (276/277) and ERA (835)/EFT transactions.
Prevalidated NCQA Patient-Centered Medical Home
NCQA PCMH Prevalidation includes a rigorous evaluation of a submitted health IT solution’s functionality including but not limited to, reporting functions, report examples, screen shots, live demonstrations and other relevant documentation. Based on the review of information submitted above, NCQA approves or declines autocredit based on PCMH factor-level requirements and designates for which factors a product is able to support practices.
Maryland Health Care Commission
The Maryland Health Care Commission is an independent regulatory agency whose mission is to plan for health system needs, promote informed decision-making, increase accountability, and improve access in a rapidly changing health care environment by providing timely and accurate information on availability, cost, and quality of services to policy makers, purchasers, providers and the public. Office Ally is certified for Electronic Health Network by the Maryland Health Care Commission (MHCC).
Expiration Date: February 26, 2026
Need further information?
Please contact Office Ally's HIPAA Compliance Manager
