<img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=1611884&amp;fmt=gif"> Skip to main content
NewVouched is live in Epic MyChartLearn More
Talk to salesStart free
  1. Solutions
  2. Health systems
  3. Epic

For the CIO

Identity‑proof patients, employees and affiliated staff, in Epic and outside it.

Native verification inside MyChart and EpicCare Link, and the same verified identity for your workforce, your help desk and every channel outside Epic. No redirects, no custom middleware.

Talk to sales
Identity verified inside MyChartMaya creates a MyChart account inside the health system’s own branded flow, scans her ID and takes a live selfie, and the verified data flows back into Epic so her account is active without knowledge-based questions. MYCHART ACCOUNT CREATIONEPIC SHOWROOMMaya R.Patient · new MyChart account1Opens the MyChart sign-up flow, under your brand2Scans her ID and takes a live selfie3Verified data flows back into Epic4Account is active, with no KBA questionsRESULTVERIFIED IN EPIC

The risk

The questions you rely on can be answered by anyone.

Knowledge-based questions ask for facts that breaches and social media have already exposed. Attackers guess or buy the answers, while real patients forget them. NIST no longer allows them for identity verification.

Attackers

19.7%

Chance an attacker guesses a common answer, such as a favorite food, on the first try

Exposed

190M

People whose data was exposed in a single healthcare breach

Fraudsters

92%

Passed knowledge-based questions in a contact-center study, against 46% of genuine customers

ID proofing

No KBV

Allowed for identity verification under NIST SP 800-63A-4

724,000

The IRS learned this the hard way. In 2015, fraudsters passed the knowledge-based questions on its Get Transcript service using personal data they already held and answers found with online search tools, and accessed 724,000 taxpayer accounts. The IRS took the service offline.

Sources: Google research, via SecurityWeek · CyberInsider, 2025 · NIST SP 800-63A-4, via Verdocs · Pindrop, 2022 · Nextgov, 2016

The workflow inside Epic

Two Epic surfaces. One identity layer.

Vouched embeds where your patients and clinicians already are.

  1. 1

    MyChart, for patients

    Account creation, telehealth and account recovery, embedded directly in the MyChart flow and fully white-labeled.

  2. 2

    EpicCare Link, for clinicians

    Account creation, recovery and external access for referring physicians and community providers.

  3. 3

    Verified data into Epic

    Name, date of birth, contact details, ID attributes and the biometric result flow straight into Epic.

  4. 4

    Dedicated, standards-based

    A dedicated API key per health system, FHIR and OIDC compatible, with zero access to clinical records.

In the Epic Showroom with Toolbox designation for MyChart and EpicCare Link. Turnkey on Epic’s November 2025 release or later.

The proof

Live in weeks, not quarters.

Test in a real pre-production Epic sandbox with synthetic patients, then activate through the Epic Toolbox.

Go-live

6–8 wks

Typical go-live from contract

Turnkey

< 4 wks

Epic Toolbox activation on the November 2025 release or later

Completion

97%

First-attempt completion

Accuracy

99%

ID document authentication accuracy

Source: Vouched product data

Explore by role

Other seats at the table.

Every page follows the same pattern: the risk, the workflow and the proof.

CISO + CFOClose the help desk hole.Account recovery and password reset by selfie, not by a phone call that can be talked around.Read more →Patient AccessActivate more patients without a phone call.Portal activation and registration without a front-desk ID check.Read more →Patient Experience / MarketingA first impression patients finish.A branded verification flow that feels like part of your digital front door.Read more →Virtual CareVerify both sides of the camera.Clinician and affiliate identity through EpicCare Link, before the visit starts.Read more →CISO / IAMVerify the workforce, in the stack you already run.Employees and contractors verified into your existing IAM and help desk.Read more →CIO / HIMFix the record you already hold.Duplicates and overlays resolved with a face match, not another demographic guess.Read more →CFORun the numbers yourself.Resets avoided, duplicate remediation and activation lift, in one calculator.Open the ROI calculator →

Trust

Built for the security review.

Everything your security review asks for, from the SOC 2 report to the BAA, is on one page.

Visit the Trust Center
HIPAA and BAABuilt to support HIPAA compliance; BAA in place
NIST SP 800-63A IAL2Kantara-approved workflow
SOC 2 Type IIReport available under NDA
ISO 27001Information security management
Zero access to clinical recordsIdentity data only
Biometric privacyNotice and consent on every selfie

FAQ

Epic, answered.

Straight answers for CIOs about Vouched inside Epic.

Contact us with a question
Why replace knowledge-based questions in MyChart?

NIST SP 800-63A-4 states that knowledge-based verification shall not be used for identity verification. The answers are easy to guess or buy: Google found attackers guess a common answer such as a favorite food 19.7% of the time on the first try, and breaches like Change Healthcare exposed 190 million people’s data. When the IRS relied on knowledge-based questions for its Get Transcript service, fraudsters accessed 724,000 taxpayer accounts.

Is Vouched in the Epic Showroom?

Yes. Vouched is in the Epic Showroom with Toolbox designation for MyChart and EpicCare Link, and is turnkey on Epic’s November 2025 release or later.

Does Vouched redirect patients out of MyChart?

No. Vouched embeds directly in the MyChart account creation flow and is fully white-labeled, so patients never leave your experience.

What data flows back into Epic?

The verified name, date of birth, contact details, ID attributes and the biometric result flow directly into Epic. Vouched has no access to clinical records.

Can we test before going live?

Yes. Vouched provides a real pre-production Epic sandbox with synthetic patients, so no real patient data is used in testing, plus live demo links your team can run on their own devices.

Which standards does the integration support?

Vouched integrates with Epic through its Toolbox designation and supports FHIR and OIDC, with a REST API and mobile SDKs for other channels.

Epic, MyChart and EpicCare Link are trademarks of Epic Systems Corporation.