Verified Healthcare Providers on exora

What is a verified provider?

A verified provider on exora is a healthcare professional whose identity and AHPRA (Australian Health Practitioner Regulation Agency) registration have been confirmed. Verification establishes a trust chain between the provider, their patients, and the platform.

Verification is open to all professions registered with AHPRA - including doctors, nurses, midwives, pharmacists, physiotherapists, psychologists, dentists, and Chinese medicine practitioners, among others.

Verification is not automatic. It requires you to claim your registration from the national register, then have your identity confirmed through a review process.

If you are a healthcare provider who is not registered with AHPRA, provider verification is not available to you yet. Contact us at support@exora.au and we will keep you posted as we add more pathways.

If you are a patient reading this

This guide is written for healthcare providers. If you are an exora user, here is the part that matters most to you: a provider being verified does not give them any access to your records. They can only ever see what you choose to share - you decide exactly what, and for how long, and you can stop sharing at any time. To learn how that works, see the sharing and permissions guide.

What verification grants you

Once verified, provider features activate on your account. None of them give you access to anyone’s data by default - they let you act as a provider once a patient chooses to share with you.

• View records patients share with you - When an exora user grants you access to their profile (read access or higher), you can view the health data they have chosen to share - documents, medications, conditions, lab results, and more. Sharing is what creates the relationship; until a user shares with you, you cannot see their record.
• Contribute clinical notes - If a patient grants you read and write access, you can write notes on their health record. Notes from a verified provider carry a clinician-confirmed quality tier, distinguishing them from notes authored by the person themselves or by others they have shared with, such as family members.
• Work mode - A separate working context for the patients who have shared with you, kept completely apart from your own personal health. More on this below.

Being listed in the exora provider directory is not something verification grants. The directory is built from the AHPRA register, so patients can find you - and even choose to share their records with you - before you have joined exora or verified. Any access a patient grants in that situation stays pending, and only becomes active once you claim your registration and complete verification. In search results, a listing looks the same whether or not it has been claimed or verified.

How to claim your AHPRA registration

Claiming links your exora account to your entry in the AHPRA national register. You can start the process in two ways:

1. During sign-up - After identity verification, you will be asked if you are a registered healthcare provider. Select your profession and you will be taken to the claim screen.
2. From account settings - Go to Settings, then Account, then Provider Claim. This option is only available after you have verified your identity.

On the claim screen, search by name, state, or AHPRA registration number. Results are drawn from the AHPRA public register. Tap a result to lodge your claim.

Each exora account can only be linked to one AHPRA registration.

How verification works

After claiming, your registration needs to be verified. This confirms that you are the person behind the AHPRA registration.

During early access

The exora team reviews and verifies your claim directly. Tap “Request Review” on the verification screen and you will receive a notification when the review is complete. This typically happens within a few hours.

Later

We are adding the option to have a verified healthcare provider colleague support your claim, which can help confirm it faster. You will be able to share a link with a colleague or find one already on exora.

A colleague’s support is optional - the exora team always completes verification.

Work mode and Home mode

Every verified provider is also an exora user with their own health record. So a provider account is really two contexts in one, kept strictly separate:

• Home mode - Your own personal health. Upload your documents, view your history, manage your profiles. This is the same experience every exora user has.
• Work mode - The patients who have shared their records with you. View their health data and, where you have write access, contribute clinical notes. Only available to verified providers.

The two never bleed into each other. Nothing from your personal life surfaces while you are in Work mode, and nothing about your patients surfaces while you are in Home mode.

You switch modes from the global header, and a mode indicator stays visible so you are never unsure which context you are in. Leaving Work mode for Home is instant.

Entering Work mode is protected by a dedicated Work mode PIN, separate from your exora sign-in, with Face ID or Touch ID as a quick alternative on supported devices. So even if your phone is unlocked and in someone else’s hands, your patient list and their records stay sealed behind that step. Work mode also re-locks automatically when you leave the app or after a short period of inactivity, so you re-authenticate each time you return to it.

Privacy and data access

exora is a patient-owned platform. Providers can only access health data that a patient has explicitly shared with them. There is no default or implied access.

• Patient controls sharing - The patient decides what to share, with whom, and for how long. They can revoke access at any time.
• Scoped access - Sharing can be limited to specific health categories (e.g. only medications, only lab results) rather than full records.
• Audit trail - All provider access to shared data is logged.
• No data leaving the platform - Providers view data within exora. There is no bulk export or download of patient records.

Trust chain and accountability

The verification system creates a chain of trust:

1. Identity verification - The provider’s identity is confirmed (see our identity verification guide).
2. Registration verification - The provider’s AHPRA registration is confirmed, linking their real identity to their professional registration.
3. exora team confirmation - The exora team reviews and completes the verification.

This multi-step process prevents impersonation and ensures that only legitimate healthcare professionals access patient data through the platform.

If a provider’s AHPRA registration status changes (e.g. suspended or cancelled), their verified status on exora will be reviewed.

Identity verification requirement

You must verify your identity before you can claim a provider registration. This is a permanent requirement, not just for early access.

During early access, the exora team verifies your identity. Additional verification methods are in development.

Identity verification is separate from provider verification. It confirms who you are; provider verification confirms what you do professionally. See our identity verification guide for details.

Questions?

If you have questions about provider verification or need help with the process, contact us at support@exora.au.