The verification standard
Every provider on Heyzl goes through the same 8 checks before they can be listed. Below is the actual state of each one — which run automatically, which still need a person, and the rule that governs what happens when a check cannot be completed.
How a provider gets listed
4 checks run automatically.
4 still need a person.
Most marketplaces show you a verified badge and stop there. Here is the actual state of each check, including the ones we have not automated.
Medical license
AutomatedA verified, non-expired license must be on file. Enforced in application code and again by a database constraint, so no admin action can bypass it.
Malpractice insurance
AutomatedAn active policy of at least $1,000,000 in coverage, checked against its effective and expiry dates.
Background check
AutomatedA provider carrying a flagged background check cannot be listed.
NPI registry (NPPES)
AutomatedLooked up live against the CMS national provider registry at npiregistry.cms.hhs.gov.
Exclusion screening (OIG / NPDB)
Manual reviewNo automated feed yet. Routed to a human reviewer rather than recorded as clean.
Sanctions screening (OFAC)
Manual reviewNo automated feed yet. Routed to a human reviewer.
Facility accreditation (JCI)
Manual reviewConfirmed by a reviewer against the accrediting body, not by an API.
Identity verification
Manual reviewReviewed by a person until the automated integration is live.
The rule that matters: A check we cannot perform against an authoritative source is never recorded as a pass. It becomes a manual review, and the provider stays unlisted until a person completes it.
If you are a patient
A listed provider has a verified, non-expired medical license and active malpractice coverage on file — those two checks are enforced in code and by a database constraint, so no manual step can skip them. Checks marked “manual review” above are exactly that: reviewed by a person, and disclosed as such rather than folded into a badge.
If you are a provider
Expect to supply your license, malpractice policy, and identity documents, and to wait for the manual reviews to complete — they are not skipped when a data feed is unavailable. You stay unlisted until every check resolves. Each check is recorded with its method, result, evidence, and reviewer.
What a check records
A badge tells you someone looked. It does not tell you what they looked at, when, or what they found. Every check above writes a row that answers those questions, and the row is what a reviewer relies on later — not a memory of having checked.
- Method
- Whether the result came from an API, a document, a manual review, or an automated rule — recorded per check, so a result sourced from a PDF is never indistinguishable from one sourced from a registry.
- Result and evidence
- The outcome, plus the supporting detail it was based on. A pass with no evidence behind it is not a pass.
- Who and when
- The reviewer and the timestamp. Manual checks are attributable to a person, which is what makes them auditable.
- Expiry
- Licenses and insurance policies carry dates. A credential that was valid at onboarding and has since lapsed is not treated as current.
What verification does not tell you
Credential verification establishes that a provider is who they say they are and is permitted to practice. It is a floor, not a ranking, and it is worth being exact about where it stops.
- It is not a measure of clinical skill. A verified license says a regulator permits this person to practice. It does not rank them against another verified provider, and we do not present it as if it did.
- Accreditation belongs to the facility, not to us. Where a hospital holds JCI or an equivalent, that is the hospital’s achievement. We confirm it; we do not grant it, and we never describe it as our own credential.
- It is a point-in-time result with an expiry. Checks are re-run, and a listing is suspended when a credential lapses — but no verification regime detects a change the instant it happens.
- It does not replace your own judgment. Ask the provider directly about volumes for your procedure, complication rates, and what happens if something goes wrong after you fly home. A good provider will answer.
When something fails, or changes
- A check cannot be completed. It becomes a pending manual review. The provider stays unlisted until a person resolves it. It is never recorded as a pass.
- A credential lapses after listing. License and malpractice requirements are enforced in the application and again by a database constraint, so a lapsed credential cannot quietly persist behind an active listing.
- A provider must disclose changes. Under the Provider Agreement, providers notify us within five business days of any lapse, restriction, investigation or disciplinary action.
- You can tell us something looks wrong. If a listing misstates a credential, report it and we will re-run the check. A provider is suspended while a credible safety concern is reviewed, not after.
Ready to go through it? Verification starts when you apply.
List your practice