For compounding pharmacies that want a clear, private portal for their prescribers.
RxPortal gives your pharmacy its own secure website for prescribers. Today it holds your formulary and your prescriber accounts. Online ordering is being built next.
Ask for a demo opens an email to [email protected].
How it works
We set up your pharmacy
Your portal gets its own address, such as yourpharmacy.rxportal.app, with your logo and colors. Prescribers see your pharmacy, not ours.
You load your formulary
Add products, sizes and prices, and mark what is out of stock. Prices are shown to prescribers for reference only. RxPortal never takes payment.
Your prescribers join
Invite them through RxPortal, or let them request an account that you approve. Their NPI and DEA numbers are checked for a valid format before the request reaches you.
Coming next: ordering
Ordering is not available yet. We are building it so that a prescriber can choose items from your formulary, sign by typing their name and send the order to you.
What changes for you
For the pharmacy
- You decide who can use your portal. New prescribers wait until you approve them.
- Your formulary lives in one place, with each item marked available or out of stock.
- A change to a product saves a new version, so earlier details are never overwritten.
For prescribers
- The pharmacy’s current formulary in one place, in any up-to-date web browser.
- Items the pharmacy has marked out of stock are labeled as such.
Planned, not available yet
- Typed orders sent through the portal, in place of fax and handwriting.
- Out-of-stock items blocked from new orders.
Keeping it safe
These safeguards are part of RxPortal today.
- Two-step sign-in. Every account can add an authenticator app or a passkey as a second step when signing in.
- Each pharmacy kept apart. Every request runs with one pharmacy's access, and PostgreSQL row-level security enforces it in the database itself. Sign-in cookies work only on the pharmacy's own address.
- Sensitive fields encrypted. DEA numbers and authenticator secrets are encrypted in the database with a key kept outside it. Passwords are hashed with Argon2id, then encrypted.
- A record of who did what. Sign-ins, account changes, prescriber approvals and catalog changes go into an audit log. The application cannot edit or delete it; a database rule blocks changes.
- Sessions that end. You are signed out after 15 minutes without activity. Repeated failed sign-in attempts are limited.
- Encrypted backups. The database is backed up every night. Backups are encrypted and kept on our server for 14 days. The key to decrypt them is stored separately.
- HTTPS and a private database. Connections to RxPortal use HTTPS. The database has no public address and sits on a private network.
No system is perfectly secure, and we don’t claim RxPortal is. Your pharmacy keeps its own HIPAA obligations. Ask us about a business associate agreement and how RxPortal fits your compliance program.
Ask for a demo
Write to [email protected]. Tell us your pharmacy’s name and how prescribers send you orders today, and we’ll set up a time to walk you through it.
RxPortal is new and running as a pilot. A demo shows what is ready now and what is still being built. For pricing, email us and we’ll send it.
Signing in
There is no single sign-in page. Each pharmacy has its own address, and prescribers and pharmacy staff sign in there. It looks like yourpharmacy.rxportal.app, with your pharmacy’s name in place of “yourpharmacy”.
Your pharmacy will give you its portal address.