DirectTrust Activation

AKA "Vetting" Process

Description

A key security component of Direct messaging exchange is to verify a sender is “who they say they are”. Updox performs this function by verifying the personal identity of your customers. As an Updox partner, your organization chose the type of Direct certificates to use in your integration(domain bound or address bound).

Domain bound certificates are assigned to the practice as a whole; Updox will verify the personal identity of an authorized representative of the practice. That representative, in turn, is responsible for verifying the identity of employees of the practice who are issued a Direct address.

Address bound certificates are assigned to each Direct messaging user at the practice; Updox will verify the personal identity of each of these users.

During your integration you will determine the work flow for directing your customers to the Updox DirectTrust Activation process.

Updox uses credit bureaus to accomplish these verifications. These are soft inquiries and do not affect a person’s credit report. Updox does not see the credit report details and does not store personal financial information.

Testing

In order to support testing and development, we have enabled access to two QA-only features. The first feature is a set of test data that will allow you to step through the DirectTrust activation process and obtain realistic results. The second feature is an API call that will allow you to directly toggle the setting that indicates if the vetting was successful for your practices/accounts. By combining these two features, you should be able to test your workflow end-to-end in a production-similar manner.