Skip to main content
HCP Verification adds a verification gate to your widget that requires visitors to confirm their identity as a registered healthcare professional before accessing content. This is powered by the Australian Health Practitioner Regulation Agency (AHPRA) registry and ensures that professional-only materials are only seen by qualified practitioners.

​
When to use HCP Verification

Enable HCP Verification when:
  • Your widget contains clinical or professional-only content that shouldn’t be accessible to the general public
  • Your organisation needs to demonstrate that content distribution is restricted to verified healthcare professionals
  • Regulatory or compliance requirements mandate that certain materials are gated behind professional verification
Consider your audience when enabling HCP Verification. If your widget serves both patients and HCPs, you may want to create separate widgets for each audience — one with verification enabled and one without.

​
How to enable HCP Verification

  1. Open your widget in the widget editor.
  2. Navigate to the General tab.
  3. Toggle Require HCP Verification to on.
  4. Save your widget.
That’s it — the verification gate is now active for this widget.

​
The verification flow

When a visitor opens a widget that has HCP Verification enabled, they are guided through the following process:
1

Verification prompt appears

Instead of seeing the widget content immediately, the visitor is presented with a verification screen explaining that this widget is restricted to verified healthcare professionals.
2

Enter AHPRA registration number

The visitor enters their AHPRA registration number. This is the unique identifier assigned to every registered health practitioner in Australia.
3

Enter professional email address

The visitor provides their professional email address. This is used for record-keeping and to help validate their identity.
Free email domains (such as gmail.com or hotmail.com) will trigger a warning prompting the visitor to use their professional or organisational email address instead.
4

Confirm consent

The visitor reviews and confirms their consent to proceed with verification.
5

AHPRA verification

The system verifies the provided AHPRA number against the official AHPRA registry in real time.
6

Verification result

  • Success — The visitor gains full access to all widget content. A “Verified” badge appears in the widget header, confirming their status.
  • Failure — The visitor is informed that verification was unsuccessful and can try again.

​
Supported professions

AHPRA verification covers 15 registered health professions in Australia, including:

Medical Practitioners

Nursing & Midwifery

Pharmacy

Dental

Psychology

Physiotherapy

Optometry

Chiropractic

Podiatry

Occupational Therapy

Osteopathy

Chinese Medicine

Aboriginal & Torres Strait Islander Health Practice

Medical Radiation Practice

Paramedicine

​
What changes when verification is enabled

HCP Verification affects what visitors can see before and after verifying their identity:
Before verificationAfter verification
Widget visibilityThe widget opens normallyFull access to all content
Chat tabAccessibleAccessible
Resources tabContent is hiddenFull access to all resources
Explore tabAccessibleAccessible
Header badgeNo badge”Verified” badge displayed
Before verification, visitors can see the widget shell and interact with the Chat tab, but Resources tab content is hidden. This allows visitors to understand what the widget offers while keeping professional materials gated.

​
Session behaviour

Verification status is session-based:
  • Verification persists for the duration of the browser tab session.
  • If the visitor closes the browser tab and returns later, they will need to verify again.
  • Verification is specific to each widget — verifying on one widget does not carry over to another.

​
Security

HCP Verification includes built-in protections to prevent abuse:
  • Rate limiting — Verification attempts are limited to 5 per minute per IP address. This prevents automated or brute-force attempts to bypass the verification gate.
  • Free email warning — If a visitor enters an email address from a free email provider (e.g. gmail.com, yahoo.com), a warning is displayed encouraging them to use their professional or organisational email.
  • AHPRA registry validation — Each verification request is checked against the official AHPRA practitioner registry in real time.
Rate limiting is applied per IP address. If multiple practitioners share a network (e.g. a hospital or clinic), they may collectively reach the rate limit. If this becomes an issue, contact support@roserx.health for assistance.

​
Frequently asked questions

HCP Verification is currently available for Australian healthcare professionals via AHPRA. Additional verification systems for other jurisdictions are planned for future releases. Contact support@roserx.health to discuss your requirements.
The visitor is informed that verification was unsuccessful and can try again. After 5 failed attempts within a minute, they will be temporarily rate-limited.
No. Verification is specific to each widget. If a visitor verifies on one widget, they will need to verify separately on any other widget that requires it.
Verification events are recorded in the platform’s Audit Log and associated with chat sessions in the Chat Logs.
Generally, no. HCP Verification is designed for widgets that contain clinical or professional-only materials. For patient-facing widgets, create a separate widget without verification enabled so that patients can access content freely.