Skip to main content
HCP Verification adds a verification gate to your widget that requires visitors to confirm their identity as a registered healthcare professional before accessing content. Two verification methods are available: AHPRA for Australian practitioners and NPI for United States providers. Verified professionals are recorded in the HCP Contacts directory.

When to use HCP Verification

Enable HCP Verification when:
  • Your widget contains clinical or professional-only content that shouldn’t be accessible to the general public
  • Your organization needs to demonstrate that content distribution is restricted to verified healthcare professionals
  • Regulatory or compliance requirements mandate that certain materials are gated behind professional verification
Consider your audience when enabling HCP Verification. If your widget serves both patients and HCPs, you may want to create separate widgets for each audience — one with verification enabled and one without.

How to enable HCP Verification

  1. Open your widget in the widget editor.
  2. Navigate to the General tab.
  3. From the HCP verification dropdown, choose AHPRA (Australia) or NPI (United States).
  4. Save your widget.
That’s it — the verification gate is now active for this widget.

Verification methods

AHPRA verification checks visitors against the Australian Health Practitioner Regulation Agency registry in real time.

The verification flow

1

Verification prompt appears

Instead of seeing the widget content immediately, the visitor is presented with a verification screen explaining that this widget is restricted to verified healthcare professionals.
2

Enter AHPRA registration number

The visitor enters their AHPRA registration number — the unique identifier assigned to every registered health practitioner in Australia.
3

Enter professional email address

The visitor provides their professional email address. This is used for record-keeping and to help validate their identity.
Free email domains (such as gmail.com or hotmail.com) will trigger a warning prompting the visitor to use their professional or organizational email address instead.
4

Confirm consent

The visitor reviews and confirms their consent to proceed with verification.
5

AHPRA verification

The system verifies the provided AHPRA number against the official AHPRA registry in real time.
6

Verification result

  • Success — The visitor gains full access to all widget content. A “Verified” badge appears in the widget header, confirming their status.
  • Failure — The visitor is informed that verification was unsuccessful and can try again.

Supported professions

AHPRA verification covers all health professions registered under Australia’s National Scheme (nursing and midwifery share a single registration prefix):

Medical Practitioners

Nursing & Midwifery

Pharmacy

Dental

Psychology

Physiotherapy

Optometry

Chiropractic

Podiatry

Occupational Therapy

Osteopathy

Chinese Medicine

Aboriginal & Torres Strait Islander Health Practice

Medical Radiation Practice

Paramedicine

What changes when verification is enabled

HCP Verification affects what visitors can see before and after verifying their identity:
Before verification, visitors can see the widget shell and interact with the Chat tab, but Resources tab content is hidden. This allows visitors to understand what the widget offers while keeping professional materials gated.

Session behavior

Verification status is session-based:
  • Verification persists for the duration of the browser tab session.
  • If the visitor closes the browser tab and returns later, they will need to verify again.
  • Verification is specific to each widget — verifying on one widget does not carry over to another.

Security

HCP Verification includes built-in protections to prevent abuse:
  • Rate limiting — Verification attempts are limited per IP address. This prevents automated or brute-force attempts to bypass the verification gate.
  • Registry validation — Each verification request is checked against the official registry (AHPRA or NPPES) in real time.
  • Free email warning (AHPRA) — If a visitor enters an email address from a free email provider (e.g. gmail.com, yahoo.com), a warning is displayed encouraging them to use their professional or organizational email.
  • Domain restrictions — Verification requests are only accepted from your widget’s allowed domains.
Rate limiting is applied per IP address. If multiple practitioners share a network (e.g. a hospital or clinic), they may collectively reach the rate limit. If this becomes an issue, contact support@roserx.ai for assistance.

Frequently asked questions

Choose the method that matches your audience’s jurisdiction: AHPRA for widgets serving Australian healthcare professionals, NPI for widgets serving United States providers. Each widget uses a single method.
The visitor is informed that verification was unsuccessful and can try again. Repeated failed attempts are rate-limited.
No. Verification is specific to each widget. If a visitor verifies on one widget, they will need to verify separately on any other widget that requires it.
Yes — every verified professional appears in the HCP Contacts directory, including their profession, identifier, and which widget they verified on. Verification events are also recorded in the Audit Log.
Generally, no. HCP Verification is designed for widgets that contain clinical or professional-only materials. For patient-facing widgets, create a separate widget without verification enabled so that patients can access content freely.