ONC Health IT Certification

This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.

Vendor Name: Carbon Health Technologies, Inc.
Website: www.carbonhealth.com (opens in a new tab)
Address: 2100 Franklin St., Suite 355, Oakland, CA, 94612
Contact: Haritha Atluri,Director of Clinical Informatics, haritha@carbonhealth.com, (707) 653-6724 Product Version: CarbyOS EHR v2.0

Multi-Factor Authentication

Supported Use Cases for Multi-Factor Authentication (MFA)
CarbyOs EHR provides multi-factor authentication (MFA) in compliance with the Office of the National Coordinator for Health IT’s (ONC) Multi-Factor Authentication criterion at 45 CFR 170.315(d)(13). The following workflows support MFA within CarbyOs’s product offerings:

• Login to CarbyOs EHR
  • Encompasses access for clinical, administrative, and support users.
  • MFA is required for initial login and can be configured per organization’s security preferences.
• CarbyOs Mobile Access
  • MFA requirements extend to users logging into CarbyOs EHR via mobile devices for secure, on-the-go access.

MFA Options Available

• Built-in 2FA Verification: CarbyOs includes built-in MFA capabilities using SMS and email-based two-factor authentication (2FA) at no additional cost, ensuring all user logins are securely verified.
• Customer-Configured Identity Provider (IdP) Support: Organizations can enforce MFA using their own IdP through SAML 2.0 single sign-on (SSO) integration, including providers such as Okta and Microsoft Entra. Our engineering team is available to assist with custom IdP setups.

This robust MFA support enhances the security of CarbyOs EHR, providing flexible, industry-standard authentication options for all users and workflow settings.

EHI Export Functionality
CarbyOs EHR enables providers to export out EHI for individual patients and their patient population at any time without developer assistance. Export formats include C-CDA documents for clinical records, PDFs for claims and billing information, and also documents in the original native format which they were uploaded.