> ## Documentation Index
> Fetch the complete documentation index at: https://docs.roserx.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# HCP Verification

> Restrict widget access to verified healthcare professionals using AHPRA (Australia) or NPI (United States) verification.

HCP Verification adds a verification gate to your widget that requires visitors to confirm their identity as a registered healthcare professional before accessing content. Two verification methods are available: **AHPRA** for Australian practitioners and **NPI** for United States providers. Verified professionals are recorded in the [HCP Contacts](/guides/monitoring/hcp-contacts) directory.

## When to use HCP Verification

Enable HCP Verification when:

* Your widget contains **clinical or professional-only content** that shouldn't be accessible to the general public
* Your organization needs to demonstrate that content distribution is restricted to **verified healthcare professionals**
* Regulatory or compliance requirements mandate that certain materials are **gated behind professional verification**

<Tip>
  Consider your audience when enabling HCP Verification. If your widget serves both patients and HCPs, you may want to create separate widgets for each audience — one with verification enabled and one without.
</Tip>

## How to enable HCP Verification

1. Open your widget in the widget editor.
2. Navigate to the **General** tab.
3. From the **HCP verification** dropdown, choose **AHPRA (Australia)** or **NPI (United States)**.
4. Save your widget.

That's it — the verification gate is now active for this widget.

## Verification methods

<Tabs>
  <Tab title="AHPRA (Australia)">
    AHPRA verification checks visitors against the **Australian Health Practitioner Regulation Agency** registry in real time.

    ### The verification flow

    <Steps>
      <Step title="Verification prompt appears">
        Instead of seeing the widget content immediately, the visitor is presented with a verification screen explaining that this widget is restricted to verified healthcare professionals.
      </Step>

      <Step title="Enter AHPRA registration number">
        The visitor enters their AHPRA registration number — the unique identifier assigned to every registered health practitioner in Australia.
      </Step>

      <Step title="Enter professional email address">
        The visitor provides their professional email address. This is used for record-keeping and to help validate their identity.

        <Info>
          Free email domains (such as gmail.com or hotmail.com) will trigger a warning prompting the visitor to use their professional or organizational email address instead.
        </Info>
      </Step>

      <Step title="Confirm consent">
        The visitor reviews and confirms their consent to proceed with verification.
      </Step>

      <Step title="AHPRA verification">
        The system verifies the provided AHPRA number against the official AHPRA registry in real time.
      </Step>

      <Step title="Verification result">
        * **Success** — The visitor gains full access to all widget content. A **"Verified"** badge appears in the widget header, confirming their status.
        * **Failure** — The visitor is informed that verification was unsuccessful and can try again.
      </Step>
    </Steps>

    ### Supported professions

    AHPRA verification covers all health professions registered under Australia's National Scheme (nursing and midwifery share a single registration prefix):

    <CardGroup cols={3}>
      <Card title="Medical Practitioners" icon="user-doctor" />

      <Card title="Nursing & Midwifery" icon="heart-pulse" />

      <Card title="Pharmacy" icon="prescription-bottle-medical" />

      <Card title="Dental" icon="tooth" />

      <Card title="Psychology" icon="brain" />

      <Card title="Physiotherapy" icon="person-walking" />

      <Card title="Optometry" icon="eye" />

      <Card title="Chiropractic" icon="bone" />

      <Card title="Podiatry" icon="shoe-prints" />

      <Card title="Occupational Therapy" icon="hand-holding-medical" />

      <Card title="Osteopathy" icon="spine" />

      <Card title="Chinese Medicine" icon="mortar-pestle" />

      <Card title="Aboriginal & Torres Strait Islander Health Practice" icon="leaf" />

      <Card title="Medical Radiation Practice" icon="radiation" />

      <Card title="Paramedicine" icon="truck-medical" />
    </CardGroup>
  </Tab>

  <Tab title="NPI (United States)">
    NPI verification checks visitors against the **NPPES registry** (the National Plan and Provider Enumeration System) in real time.

    ### The verification flow

    <Steps>
      <Step title="Verification prompt appears">
        The visitor is presented with a verification screen explaining that this widget is restricted to verified healthcare professionals.
      </Step>

      <Step title="Enter NPI number">
        The visitor enters their 10-digit **National Provider Identifier (NPI)**.
      </Step>

      <Step title="Self-attestation">
        The visitor confirms via a checkbox that they are the healthcare professional identified by the NPI. No email address is required.
      </Step>

      <Step title="NPPES verification">
        The system checks the NPI against the NPPES registry in real time. Only **active, individual (Type 1) NPIs** pass verification — organizational (Type 2), deactivated, and unrecognized NPIs are rejected.
      </Step>

      <Step title="Verification result">
        * **Success** — The visitor gains full access to all widget content, with a **"Verified"** badge in the widget header.
        * **Failure** — The visitor is informed that verification was unsuccessful and can try again.
      </Step>
    </Steps>
  </Tab>
</Tabs>

## What changes when verification is enabled

HCP Verification affects what visitors can see before and after verifying their identity:

|                       | Before verification       | After verification           |
| --------------------- | ------------------------- | ---------------------------- |
| **Widget visibility** | The widget opens normally | Full access to all content   |
| **Chat tab**          | Accessible                | Accessible                   |
| **Resources tab**     | Content is hidden         | Full access to all resources |
| **Explore tab**       | Accessible                | Accessible                   |
| **Header badge**      | No badge                  | "Verified" badge displayed   |

<Note>
  Before verification, visitors can see the widget shell and interact with the Chat tab, but Resources tab content is hidden. This allows visitors to understand what the widget offers while keeping professional materials gated.
</Note>

## Session behavior

Verification status is **session-based**:

* Verification persists for the duration of the browser tab session.
* If the visitor closes the browser tab and returns later, they will need to verify again.
* Verification is specific to each widget — verifying on one widget does not carry over to another.

## Security

HCP Verification includes built-in protections to prevent abuse:

* **Rate limiting** — Verification attempts are limited per IP address. This prevents automated or brute-force attempts to bypass the verification gate.
* **Registry validation** — Each verification request is checked against the official registry (AHPRA or NPPES) in real time.
* **Free email warning** (AHPRA) — If a visitor enters an email address from a free email provider (e.g. gmail.com, yahoo.com), a warning is displayed encouraging them to use their professional or organizational email.
* **Domain restrictions** — Verification requests are only accepted from your widget's allowed domains.

<Warning>
  Rate limiting is applied per IP address. If multiple practitioners share a network (e.g. a hospital or clinic), they may collectively reach the rate limit. If this becomes an issue, contact [support@roserx.ai](mailto:support@roserx.ai) for assistance.
</Warning>

## Frequently asked questions

<Accordion title="Which verification method should I choose?">
  Choose the method that matches your audience's jurisdiction: **AHPRA** for widgets serving Australian healthcare professionals, **NPI** for widgets serving United States providers. Each widget uses a single method.
</Accordion>

<Accordion title="What happens if a visitor enters an incorrect registration number?">
  The visitor is informed that verification was unsuccessful and can try again. Repeated failed attempts are rate-limited.
</Accordion>

<Accordion title="Does verification carry over between widgets?">
  No. Verification is specific to each widget. If a visitor verifies on one widget, they will need to verify separately on any other widget that requires it.
</Accordion>

<Accordion title="Can I see who has verified?">
  Yes — every verified professional appears in the [HCP Contacts](/guides/monitoring/hcp-contacts) directory, including their profession, identifier, and which widget they verified on. Verification events are also recorded in the [Audit Log](/guides/monitoring/audit-log).
</Accordion>

<Accordion title="Should I enable HCP Verification for patient-facing widgets?">
  Generally, no. HCP Verification is designed for widgets that contain clinical or professional-only materials. For patient-facing widgets, create a separate widget without verification enabled so that patients can access content freely.
</Accordion>