Branzino HealthSomewhere in every EHR comparison, the phrase "ONC-certified" appears — usually presented as a seal of legitimacy, sometimes as a warning that anything without it is unsafe or illegal. Neither framing is quite right. ONC certification matters a great deal to some practices and not at all to others, and which group you're in comes down almost entirely to how you bill.
What ONC certification actually is
The Office of the National Coordinator for Health IT (ONC, part of HHS) runs a voluntary certification program for health software. Certified EHRs have been tested against federal criteria for things like structured data formats, electronic prescribing standards, patient data export, and interoperability APIs. The keyword is voluntary — certification is a product standard vendors opt into, not a license practices need to operate.
Who actually needs a certified EHR
Certification becomes effectively mandatory when a government program pays you and conditions payment on using certified technology:
- Medicare's Promoting Interoperability / MIPS programs. Clinicians billing Medicare under these programs must use certified EHR technology or take a payment penalty.
- Medicaid and certain state programs, which mirror the federal requirements.
- Some hospital affiliations and payer contracts that write certified technology into their terms.
Notice the pattern: every path to "required" runs through insurance billing. There is no law that says a medical practice must use a certified EHR to see patients and keep records.
Why cash-pay practices generally don't
If you don't bill Medicare or Medicaid, no program exists to penalize you for using non-certified software. A cash-pay med spa, chiropractic or PT clinic, performance facility, or direct-pay practice can chart, prescribe, and bill in any system that meets its real obligations — and pay for exactly that. This is the same logic as the rest of the insurance-feature question: requirements built for payer programs don't follow you into a cash practice.
Certification isn't free for vendors, and its costs show up in subscription prices. It's one reason certified, insurance-first EHRs cost what they do — and one reason cash-first software can be honest about charging far less.
What still applies to everyone
Skipping certification does not mean skipping obligations. Regardless of how you bill:
- HIPAA applies in full — privacy, security, and a signed BAA with your software vendor. See our one-page HIPAA checklist.
- Information-blocking rules apply — patients have a right to their records, and practices can't unreasonably withhold them.
- State record-keeping and prescribing laws apply, including e-prescribing standards where mandated.
The bottom line
Ask one question: do I bill Medicare, Medicaid, or a contract that names certified technology? If yes, buy certified. If no, certification is a checkbox you're free to ignore — and paying certified-EHR prices for a cash practice is money spent on someone else's requirement. The rest of what matters when choosing is in our cash-pay EHR buyer's guide.
