CFAI
Civic & Federal Access Intelligence · Exclusion Screening

Welcome — let's get your screening set up

Thanks for signing up. This is the last step: tell me who to screen. It takes a few minutes.

I'll screen every name against the federal exclusion lists (OIG, SAM, OFAC) and the state Medicaid exclusion lists, then send you a dated report. After that it runs every month automatically.

No Social Security numbers — on purpose. Holding SSNs is what forces the big vendors to charge you for encrypted storage, cyber-liability insurance, and breach protection — costs that get passed straight to you. I strip all of that out, which is a big part of how I stay at $310 instead of $1,500+. Screening runs on name and date of birth; the one time an SSN is needed to confirm a match, you verify it yourself on the government's own site — the way it's designed. Your people's most sensitive data never sits on my system, so it can never leak from my side.
Your practice
Your roster

Everyone who works at the practice — employees, contractors, and any vendors you pay who touch patient care or billing (billing companies, staffing agencies, contract therapists). Excluded vendors are a real exposure, so don't leave them out.

A spreadsheet or typed list is fine — whatever you already have.
The more identifying detail you give me, the cleaner and faster your report. Different people share names — the extra fields are what let me confirm a flag is (or isn't) your actual person, instead of a stranger who happens to share a name. Give what you can; it's your call what to include, but here's what helps most:
For each PERSON (employees, providers, contractors)
  • Full legal name — required — first, and last. Include a middle name or initial if you have it, and a second last name if they use one (hyphenated or two surnames). Names are the primary match key — the fuller, the better.
  • Date of birth — MOST IMPORTANT — this is the single field that lets me automatically clear a same-name stranger off your report. Without it, common names can't be auto-cleared and every one becomes a manual review.
  • NPI number — if they have one (providers do; front-desk and admin staff usually don't). When present, it makes the match airtight.
  • Role / title — helps me sanity-check the results.
For each VENDOR you pay (billing companies, staffing agencies, labs, contract groups)
  • Full legal business name — required — exactly as it appears on your agreement or invoices, including "LLC / Inc." if applicable.
  • EIN (business tax ID) — if you have it on file. For a company, the EIN is the equivalent of a person's DOB — the cleanest way to confirm the exact entity.
  • NPI — if the vendor is a billing organization with one.
  • Owner or contact name — if you have it; helps match the entity to the people behind it.
You decide what to share. I can screen with just names — but DOB (for people) and EIN (for vendors) are what make the difference between a clean report and a pile of manual reviews.