Frequently Asked Questions

MedSE Prescribe is a secure digital prescribing platform that enables healthcare professionals to create, manage, and track electronic prescriptions. It connects prescribers with pharmacies through a compliant, end-to-end encrypted system.

MedSE Prescribe is available to licensed prescribers (doctors, nurse practitioners, pharmacist prescribers), registered pharmacies, and developers building healthcare integrations. All users must verify their professional credentials before gaining access.

Visit the registration page and select your role (prescriber, pharmacy, or developer). Provide your professional details, complete identity verification via our secure KYC process, and your account will typically be activated within 24 hours.

MedSE Prescribe currently operates in the United Kingdom, Germany, and Austria. We are actively expanding to additional European markets. Each country has localised regulatory compliance built into the platform.

All data is encrypted at rest and in transit using AES-256 and TLS 1.3. We are fully GDPR compliant, and our infrastructure is hosted in EU-based data centres with SOC 2 Type II certification. Regular penetration testing and security audits ensure ongoing protection.

Navigate to the Prescriptions section and click 'New Prescription'. Select or register a patient, search for the medication, set dosage instructions, and review the prescription. Apply your digital signature to finalise and send it to the selected pharmacy.

Each prescription is cryptographically signed using ECDSA (Elliptic Curve Digital Signature Algorithm). This creates a tamper-proof record that verifies the prescriber's identity and ensures the prescription has not been altered after signing.

Standard prescriptions are valid for 6 months from the date of issue. Controlled substance prescriptions are valid for 28 days. The platform automatically tracks expiry dates and notifies both prescribers and pharmacies.

Yes, prescriptions can be revoked at any time before they are dispensed. Navigate to the prescription details and select 'Revoke'. You must provide a reason for revocation. Once dispensed, a prescription cannot be revoked but can be flagged for review.

Controlled substances (Schedule 2-5) require additional verification steps including enhanced identity confirmation, quantity limits per prescription, shorter validity periods (28 days), and mandatory audit trails. The platform enforces these rules automatically.

Patients receive a unique prescription token via SMS and email. This token contains a QR code and a short alphanumeric code that they present at the pharmacy. The token is valid until the prescription expires or is dispensed.

Enter the token code in the verification field or scan the QR code using the built-in scanner in the pharmacy portal. The system will display the full prescription details, verify the digital signature, and confirm the prescription is valid and undispensed.

After marking a prescription as dispensed, the system updates the prescription status in real time. The prescriber receives a notification, the patient record is updated, and the dispensing event is permanently recorded in the audit trail.

Contact our onboarding team or apply through the pharmacy registration form. Once verified, you will receive API credentials to integrate prescription verification into your existing pharmacy management system. We provide SDKs for TypeScript, Python, and .NET.

Limited offline verification is available for emergency situations. The QR code contains a cryptographic proof that can be validated locally. However, full verification including dispense status and prescription updates requires an internet connection.

Navigate to the History section in the pharmacy portal. You can filter by date range, patient, medication, or status. All dispense records include timestamps, pharmacist details, and any notes added during dispensing.

Sign up for a developer account and navigate to the API Keys section. You can generate sandbox keys immediately for testing. Live production keys require account verification and approval, which typically takes 1-2 business days.

Rate limits depend on your plan: Standard (100 requests/minute), Professional (1,000 requests/minute), Enterprise (custom). Rate limit headers are included in every response. If you exceed the limit, you will receive a 429 status code with a retry-after header.

Configure webhook endpoints in the Developer portal to receive real-time notifications for events like prescription.created, prescription.dispensed, and prescription.cancelled. Payloads are signed with your webhook secret for verification. Failed deliveries are retried up to 5 times.

The API provides endpoints for prescriptions (CRUD operations), patients (lookup and management), medications (search and details), pharmacies (discovery and verification), and webhooks (configuration). Full documentation is available in the Developer portal.

The sandbox mirrors the production API with test data. Use your sandbox API key to make requests against the sandbox base URL. You can create test prescriptions, simulate dispensing, and test webhook deliveries without affecting real data.

Go to Settings > Security and select 'Change Password'. Enter your current password and your new password. Passwords must be at least 12 characters and include a mix of uppercase, lowercase, numbers, and symbols.

Navigate to Settings > Security and enable Two-Factor Authentication. Scan the QR code with an authenticator app (such as Google Authenticator or Authy), enter the verification code, and save your backup codes in a secure location.

We offer three tiers: Starter (free for up to 50 prescriptions/month), Professional (per-prescription pricing with advanced features), and Enterprise (custom pricing with dedicated support and SLAs). Visit our pricing page for current rates.

Go to Settings > Billing and select 'Change Plan'. Choose your desired tier and enter payment details. Upgrades take effect immediately. Downgrades take effect at the start of the next billing cycle.

Navigate to Settings > Data Management and select 'Export Data'. You can export prescriptions, patient records, and activity logs in CSV or JSON format. Data exports are encrypted and available for download for 7 days. Full GDPR data portability is supported.

Prescription data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3. Each prescription has a unique encryption key derived from the prescriber's credentials. Database fields containing PHI (Protected Health Information) use column-level encryption.

ECDSA (Elliptic Curve Digital Signature Algorithm) is the cryptographic method used to sign prescriptions. It provides strong authentication guarantees with compact signatures. Each prescriber has a unique key pair, and signatures are verified by pharmacies during dispensing.

Prescription tokens use HMAC-SHA256 for integrity verification and are bound to a specific prescription and patient. Tokens expire automatically, cannot be reused after dispensing, and are transmitted over encrypted channels. QR codes contain a cryptographic proof for offline validation.

Prescription records are retained for the legally required period (typically 8 years in the UK, 10 years in Germany). After the retention period, data is securely deleted using cryptographic erasure. You can request early deletion of non-regulated data through Settings > Privacy.

Report security vulnerabilities to [email protected] or through our responsible disclosure programme. We acknowledge reports within 24 hours and aim to resolve critical issues within 72 hours. We do not take legal action against good-faith security researchers.