Direct Secure Messaging
 

CMS now requires all of our PHI to be transmitted via DSM instead of encrypted email. Anyone have any recommendations for a provider that is reasonably priced and easy to work with? Data Motion comes up a lot and I see Cerner is on the approved list, though I would not want to work with Cerner again.

Cerner is a mess. I can't imagine EPIC being unable to offer something but EMRs are expensive.

Epic does not make a product for us unfortunately, and they are only 80 miles from us. Our current EHR does not have a solution just yet so we have to get the PDF form the EHR and send it via DSM. It isn't like these standards are new. Sheesh.

We thought about TikTok but...

We had one person do the following -
Generate a pdf, about 400 pages.
Print said pdf, single sided.
Put each page in a fax machine, fax to ???
Remove page from fax machine, at least she put the pages in the secure waste bin.
Can you imagine how long that takes? She did it more than once.

We're using MoveIt, we got it for moving files around but it also has a plug in to Outlook. It takes the attachment and stores it on a server in our DMZ, and sends the recipient a link to retrieve the file. I don't use it myself, so I'm not sure what mechanism keeps that secure so that only the intended receiver can retrieve the file, but I'm sure their sales guys can tell you.

https://www.ipswitch.com/moveit/ad-hoc

Yes, Wechat, Tiktok and others (with possible poor translation from Chinese)

When our firewall encrypts email it is a similar procedure but that is different than what they are asking for. What they tell us is that it is not email, you send it to an address. Sure. It isn't email but it can be email or not. I guess a Nissan Murano isn't a car because it is a CUV.

"HOW DOES DIRECT WORK?
Direct can be incorporated into a variety of user interfaces such as an email client, a mobile device, healthcare IT system portals or as an automated data delivery feed. Any of these interfaces are capable of sending or receiving Direct messages. But in order to participate, both sender and recipient users will need a specific Direct email address provided by their HISP. Healthcare IT systems can integrate Direct in multiple ways depending on the desired workflow."

At the business I last worked at our "home office" was in the city where the owner of the company lived. One time we sent him a request for a text file. We sent it to him via Email. He printed that email made some notes in the margin, and handed to to the one man that had the text file. He faxed us a partial answer answer back to us, and it was almost illegible with his chicken scratch handwriting. We picked up the phone and called and talked to him for 30 minutes and got the answer we needed. It was a long string of text and numbers that is easy to transpose a number. We had asked for the text file to be emailed to us, and we got a fax of chicken scratch. It could have been done digitally in 2 minutes, but analog sucks time.

Check out Threema . Seriously one of the most secure ways to communicate on the internet.

I think they use "Voltage Secure" at work which I think is similar.
https://voltage.com/products/email-security/micro-focus-securemail-cloud/download/