# TEFCA Individual Access Services Provider checklist

Provider or app: [name]

Website: [official URL]

Review date: [YYYY-MM-DD]

This worksheet helps evaluate a current TEFCA individual-access path. It is not an endorsement, certification, privacy review, security audit, or legal conclusion.

## TEFCA connection

- Claimed role or connection: [IAS Provider / Participant / Subparticipant / connector / unknown]
- QHIN or TEFCA connector: [name or unknown]
- Official source used to verify participation: [RCE directory, provider documentation, or none]
- Verification date: [YYYY-MM-DD]
- Participation still uncertain: [yes / no]

## Exchange capabilities

- Can request my information: [yes / no / unclear]
- Can receive my information: [yes / no / unclear]
- Can export my information: [yes / no / unclear]
- Can share information with connected providers: [yes / no / unclear]
- Is sharing optional and controlled by me: [yes / no / unclear]
- Sources or organization types described as reachable: [list or unclear]
- Date ranges or record types supported: [list or unclear]

## Identity and account process

- Identity path: [portal credentials / demographics plus identity proofing / other / unclear]
- Identity-verification provider: [name or unclear]
- Identity information required: [list]
- Portal credentials requested: [which portals or none]
- Failed-match support process: [description or unclear]
- Caregiver or representative process: [description or unclear]
- Identity-data retention after verification: [description or unclear]

## Privacy and data use

- Privacy notice URL and review date: [URL and YYYY-MM-DD]
- Information collected: [summary]
- Uses beyond providing access: [summary or unclear]
- Sharing or disclosures: [summary or unclear]
- Advertising, sale, or research terms: [summary or unclear]
- Retention period: [summary or unclear]
- Account and data deletion process: [summary or unclear]
- Security claims reviewed without treating them as a guarantee: [yes / no]

## Records, provenance, and portability

- Readable export format: [format or none]
- Machine-readable export format: [format or none]
- Source organization preserved: [yes / no / unclear]
- Dates and document types preserved: [yes / no / unclear]
- Original identifiers or provenance preserved: [yes / no / unclear]
- Duplicate handling explained: [yes / no / unclear]
- Missing or failed sources shown: [yes / no / unclear]
- Request or transaction history available: [yes / no / unclear]

## Cost and support

- Account or subscription fee: [amount or unclear]
- Other access, export, or sharing fees: [amount or unclear]
- Support channel: [email / phone / portal / other]
- Failed request or source dispute process: [description or unclear]
- Account closure and export steps tested: [yes / no]

## Trial request log

- Request date: [YYYY-MM-DD]
- Source requested: [organization or category]
- Response: [record returned / no match / no data / error / pending]
- Source and identity verified: [yes / no]
- Expected record types present: [yes / no / unknown]
- Duplicates identified: [yes / no / unknown]
- Missing records added to fallback log: [yes / no]
- Completeness status: [unknown]

## Decision

- Proceed with this provider: [yes / no / need more information]
- Open questions: [list]
- Manual portal or formal-request fallback: [list]

More connected does not mean complete. Preserve source files and keep missing records visible.