Provider Manual · Part XIII

The referring-provider portal

The other direction of referrals — outside providers sending patients to you. How they enroll and submit through your clinic-branded portal, how your team triages each submission into a chart, and how Hero keeps the referrer in the loop with secure, PHI-free status updates.

8 sections~14 min read10 screenshots
XIII
Part XIII · continued

The referring-provider portal

The other direction of referrals — outside providers sending patients to you. How they enroll and submit through your clinic-branded portal, how your team triages each submission into a chart, and how Hero keeps the referrer in the loop with secure, PHI-free status updates.

13.7Referral portal overview

The referring-provider portal

The rest of this part is about referrals you send. This page is the other direction: referrals that come to you. When a community physician wants to send you a patient, the old path is a fax that lands in a pile and a loop that quietly dies — the referrer never hears whether the patient was seen. The referring-provider portal replaces that fax with a self-serve, clinic-branded web portal. Outside providers find themselves in the national registry, verify once by text, and submit a referral with almost no typing. Your front desk triages each submission straight into a chart, and from then on Hero automatically emails the referrer a private “you have an update” note each time the patient moves forward — accepted, scheduled, seen — closing the loop without a single phone call.

The whole feature is five surfaces that fit together:

  • The portal — where outside providers enroll, sign in, and submit referrals. It lives at one address per clinic, https://refer.heroemr.com/?org=<your-org-id> — ready to copy from Admin → Referral Portal — which you share on your website or a referral pad.
  • Inbound Referrals in the Inbox — where your staff triage each submission: link it to the right chart (or create one) and accept or decline.
  • Admin → Referral Portal — where you turn it on, choose how updates go out, and verify or block individual referrers.
  • The Referral Communications card on the patient’s chart — where the care team watches the loop and sends personal notes back to the referrer.
  • The secure update emails and status page — the PHI-free notifications that keep the referrer in the loop.
The referring-provider portal sign-in page branded for Dr. Romero's Practice, headed Refer a patient to Dr. Romero's Practice, with a mobile-phone field and a Text me a sign-in code button, plus an Enroll with your NPI link for new referrers
The portal is branded per clinic — logo, name, and colors all resolve to the practice the link points at. One static site serves every Hero clinic; branding and the backend it talks to are chosen at load time from the org in the address.
The referring-provider portal on a narrow phone screen, showing Dr. Romero's Practice branding and a referrer's signed-in home with the Emma Wilson and Jordan Alvarez referral cards and their status timelines stacked vertically
The same portal on a phone — enrolling, submitting a referral, and checking status all work from a mobile browser, so a referrer can send you a patient from anywhere.
One portal, every clinic: there is a single hosted portal for all Hero practices. A referrer who works with two Hero clinics uses the same site — the clinic in the link decides the branding, where the referral lands, and who gets notified. Nothing to install or host on your side.
It ships off. The portal does nothing until an administrator enables it in Admin → Referral Portal (see 13.11). Enable it, decide your update policy, then share the link.
13.8How referrers enroll & sign in

Enrolling: NPI, a text code, and this device

Enrollment is built to take about two minutes and to need nothing a clinician doesn’t already have — no username, no password, no account approval email. A first-time referrer taps Enroll with your NPI and moves through four short steps: Find yourself → Confirm → Contact → Verify.

  1. Find yourself in the registry. The referrer either enters their 10-digit NPI directly (I know my NPI) or searches the public NPPES registry by name (Search by name — last name required, first name and state optional). Hero returns live registry matches as This is me cards showing each provider’s taxonomy and city, so they can pick themselves out of a list of namesakes.
  2. Confirm the prefilled details. Choosing a card prefills name, credential, specialty, and NPI from the registry. Everything is editable before continuing. If a provider genuinely isn’t in NPPES, Enter your details manually lets them type it in.
  3. Add contact details. The referrer supplies the mobile number they want sign-in codes and update notifications sent to, plus an email for the secure-link notifications.
  4. Verify by text. Hero texts a one-time code to that mobile number; entering it proves the number and finishes enrollment. From then on there is no password — signing in later means entering the mobile number and the texted code.
The enroll wizard on step 1, Find yourself, with the Search by name tab active and First name John, Last name Smith, State WA filled in; below the Search the registry button, live NPPES results list John Smith LMFTA in Tacoma WA and John Smith MD in Bellevue WA, each with a This is me button and the provider's NPI
Live NPPES lookup on the enroll step — real registry results with taxonomy, city, and NPI, each offering This is me. The clinic never keys in the referrer’s credentials; the registry does.

Because sign-in is a texted code rather than a password, a returning referrer would normally re-enter a code every visit. To avoid that, the portal can remember this device: once verified, the referrer’s browser holds a trusted-device credential, and future visits resume straight to their referrals with no code at all. The credential is scoped to that one browser and that one clinic and silently rotates on every use, so a stale copy can’t be replayed.

The signed-in referrer home for Sarah Chen MD showing her NPI, specialty, email and masked phone, a Your referrals count of 2, a New referral button, and two referral cards: Emma Wilson flagged URGENT and SEEN with a full Submitted-Accepted-Scheduled-Seen timeline and a note that 4 updates were shared, and Jordan Alvarez marked SUBMITTED at the start of the timeline
A returning referrer’s home, resumed on a trusted device with no code. Each referral carries a status chip and a Submitted → Accepted → Scheduled → Seen timeline that mirrors what your staff do inside Hero.
For licensed professionals only. The portal states plainly that it is for healthcare professionals and that referral details are encrypted and visible only to the clinic’s care team. It is not a patient-facing surface — patients still use the patient portal.
13.9Submitting a referral

Submitting a referral

The whole point is to make sending you a patient faster than a fax, so the form asks for the bare minimum and marks nearly everything optional. A referral moves through four steps — Patient → Clinical → Insurance → Review — but only the patient’s name is actually required.

  1. Patient. First and last name are the only required fields. Date of birth, phone, and email are all optional — helpful for matching to an existing chart, but never a blocker. “Only the patient’s name is required” is printed right on the step.
  2. Clinical. The reason for referral and any free-text notes, plus an urgency flag when the patient needs to be seen quickly (urgent referrals are badged URGENT in your queue).
  3. Insurance. Optional payer and member-ID details, if the referrer has them handy. Skippable.
  4. Review & submit. A last look, then submit. The referral appears immediately in the referrer’s own list as Submitted and drops into your Inbound Referrals queue for triage.
The New referral wizard on step 1 of four (Patient, Clinical, Insurance, Review), captioned Who are you referring? Only the patient's name is required, with Patient first name Priya and last name Nair entered and optional Date of birth, phone, and email fields also filled, above a Continue button
The New Referral form — name required, everything else optional. A referrer with only a name in front of them can still send the referral in seconds.
No account juggling: the referrer’s identity is already attached from enrollment, so every submission is automatically stamped “Referred by Dr. So-and-so.” They never re-type who they are.
13.10Triage in the Inbox

Triaging inbound referrals

Every submission lands in one place: Inbox → Inbound Referrals. This is where a referral becomes a patient. The queue lists each incoming referral with the referrer’s identity and a verification badge, the patient details that were provided, and the clinical reason. Selecting one opens a triage pane with two decisions to make: which chart and accept or decline.

  1. Match the patient to a chart. Hero suggests likely existing patients from the name and any date of birth, phone, or email the referrer supplied. Link the referral to the right existing chart, or Create patient to open a fresh chart from the referral’s details. Linking is what wires the rest of the loop — the milestone updates and the Referral Communications card all hang off the linked chart.
  2. Check who sent it. The referrer’s name, NPI, and a verified / unverified badge are shown right on the referral, so staff can see at a glance whether this is a known, verified referrer before acting (verification is managed in Admin — see 13.11).
  3. Accept or decline. Accept moves the referral into your workflow and — if updates are on — sends the referrer their first “accepted” notification. Decline closes it out. From here the patient is booked and seen through your normal scheduling and encounter flow.
The Inbox on the Inbound Referrals view: a list of incoming referrals on the left with Jordan Alvarez selected, and a triage detail pane on the right showing the referring provider's name and a verification badge, suggested matching patient charts with link controls, the referral's clinical reason, and Accept and Decline buttons
Inbound Referrals in the Inbox. The triage pane pairs patient-matching (link to an existing chart or create a new one) with the referrer’s identity and verification badge, and the accept / decline decision.
Link before you accept. The referrer’s automatic updates and the chart’s Referral Communications card only work once the referral is tied to a real chart. If you accept without linking, link it as soon as you know who the patient is.
13.11Admin — Referral Portal settings

Turning it on and setting the rules

Open the settings from the toolbar Admin menu → Referral Portal. The dialog has two halves — the org-wide switches at the top and the referrer directory below.

Enable & update policy

The Referring provider portal switch turns the portal on for your organization. Below it sits the single most important choice, the update mode (Automatic or Manual), the per-milestone toggles that decide which moments generate an update, and a gate that ties updates to verification.

SettingWhat it controls
AutomaticMilestone updates are emailed to referrers as the referral progresses. The hands-off default: the loop closes itself.
ManualUpdates are queued as pending release; staff review and release each one from the chart’s Referral Communications card before anything reaches the referrer. Choose this when you want a human to approve every outbound update.
Referral acceptedNotify the referrer when your team accepts the referral.
Visit scheduledNotify the referrer when the first visit is booked for the patient.
Patient seenNotify the referrer after the visit note is signed.
Automatic updates require verified referrersWhen on, only referrers you’ve marked Verified get automatic updates — an unverified referrer’s updates queue as pending release instead. Turn it off to let every enrolled referrer receive updates automatically.
The Referral Portal admin dialog opened from the Admin menu, showing the Referring provider portal enable switch, a Status updates to referrers section with Automatic selected next to a Manual option, three checked milestone toggles labelled Referral accepted, Visit scheduled and Patient seen, and an Automatic updates require verified referrers switch set to Enabled, above Cancel and Save Changes buttons
The top half of Admin → Referral Portal: the enable switch, the Automatic vs Manual update mode, the three milestone toggles, and the “require verified referrers” gate.

The referrer directory: verify & block

The lower half lists every provider who has enrolled against your clinic, with a control to verify or block each one:

  • Verify marks a referrer as a known, trusted correspondent. If your organization is set to require verified referrers, verification is what gates their automatic updates — an unverified referrer’s milestone emails are held back until someone verifies them.
  • Block stops a referrer cold: every milestone email is suppressed for a blocked referrer, and they no longer receive status updates. Use it for spam or a provider who should no longer be corresponding with your practice.
The lower half of the Referral Portal admin dialog: a Referring providers directory of accounts enrolled through the portal, with All / Pending / Verified / Blocked filter tabs and Sarah Chen, MD listed with a Verified badge and a Block control
The referrer directory in the same dialog, scrolled into view: enrolled providers with All / Pending / Verified / Blocked filters and per-referrer verify and block controls — here Sarah Chen, MD is verified.
Verification gates updates, not submissions. Verifying a referrer controls whether their automatic status updates flow. Any enrolled provider can still submit a referral into your queue — triage is where you decide what to do with it.
13.12Referral Communications on the chart

The Referral Communications card

Once a referral is linked to a chart, that chart grows a Referral Communications section in the patient-info panel — it renders down the vertical panel, below Preferred Pharmacies; expand it if it’s collapsed. This is the care team’s window on the loop for that patient, and the place to send a personal note back to the referrer.

  • The milestone timeline — submitted, accepted, scheduled, seen — with the date each step happened, mirroring what the referrer sees on their status page.
  • Update release state. Each milestone shows whether its update has been released to the referrer or is still pending. In manual update mode (13.11) a pending update sits here with a Release control until a staff member sends it; in automatic mode it releases itself.
  • A note composer. Staff can type a short personal note — “Intake went well, follow-up booked in two weeks” — and send it to the referrer. The note appears on the referrer’s secure status page under “From the care team.”
  • A per-referral auto-update toggle. Even with the org in automatic mode, an individual referral can have its automatic updates turned off here — useful for a sensitive case where you’d rather release each update by hand.
Emma Wilson's chart with the Referral Communications section of the patient-info panel expanded, showing the referring provider, a Submitted-Accepted-Scheduled-Seen milestone timeline with release states, previously sent updates, a per-referral automatic-update toggle, and a note composer for sending a personal message to the referrer
Referral Communications on the linked chart: the milestone timeline with per-update release state, the personal-note composer, and a per-referral toggle for automatic updates.
Personal notes are PHI-safe by design. A note you type here reaches the referrer only through the same secure, verified status page as the milestone updates — never as clinical detail in an email body (see 13.13).
13.13Secure status updates to referrers

The PHI-free update emails & status page

This is the half of the feature the referrer experiences after they’ve submitted: the automatic loop-closing updates. As the patient progresses — accepted at triage, scheduled on the calendar, and seen once the encounter is signed — Hero emails the referrer a short “you have an update” message. Crucially, the email itself carries no protected health information: no diagnosis, no note, not even the clinical reason — just a nudge and a secure link.

Following the link opens the referrer’s secure status page, which is gated before it shows anything:

  1. Verify to view. The link is verified either by a fresh one-time code texted to the referrer, or automatically if they’re on a device they previously chose to trust (the same trusted-device credential from sign-in). Only then does the page render.
  2. Read the loop. The page shows the patient, the current status, the full Submitted → Accepted → Scheduled → Seen timeline with dates, and any personal notes the care team released — each note stamped “from the care team” with its date.
  3. Links expire. Each secure link is good for about 7 days. After that the referrer simply opens the portal and signs in to see the same status live — nothing is lost, the one-time link just ages out.
The secure status page for Emma Wilson marked SEEN, headed with the clinic name and Referred by Sarah Chen MD, showing a Submitted-Accepted-Scheduled-Seen timeline with dates, a From the care team note reading thank you for the referral, intake went well and a follow-up is booked in two weeks, a Go to my referrals button, and a Viewed securely lock indicator
The secure status page, reached from a PHI-free email and unlocked by a one-time code or a trusted device. It carries the milestone timeline and the care team’s personal notes — the loop, closed.
Blocked means silent. Every milestone email is suppressed for a referrer you’ve blocked (13.11). Blocking is the switch that guarantees a provider stops hearing from your practice.
13.14Troubleshooting & FAQ

Troubleshooting & FAQ

SituationWhat’s going on / what to do
“The referrer says the update link expired.” Secure links age out after about 7 days — by design. Tell the referrer to open the portal and sign in (mobile number + texted code, or their trusted device); the same status shows live. The next milestone generates a fresh link.
“An update never went out.” Walk the chain of switches: the org is in Manual update mode (the update is pending — release it from the chart’s Referral Communications card); that milestone toggle is off in Admin; the referrer is unverified while your org requires verification; the referrer is blocked; or this individual referral has its per-referral auto-update toggle off. Any one of these holds the email.
“The referral never shows a ‘seen’ update.” “Seen” fires when the encounter is signed, not merely when the patient checks in. Finish and sign the note and the milestone releases (subject to the same switches above).
“A referrer can’t find themselves in the registry.” NPPES search is last-name-required; adding a state narrows namesakes. If they’re genuinely not in NPPES (or are a non-NPI role), they can use Enter your details manually to finish enrolling.
“The updates and the chart card aren’t appearing.” The referral isn’t linked to a chart. Open Inbox → Inbound Referrals, find the referral, and link it to the correct patient (or create the chart). The milestone timeline and Referral Communications card hang off the linked chart.
“A returning referrer is asked for a code every time.” They haven’t trusted the device, are on a different browser/device, or cleared site data. Trusting the device stores a rotating credential scoped to that browser and clinic; a new browser always starts with a texted code.
“We got a duplicate or spam referral.” Decline it at triage. For a provider who should stop submitting, block them in the Admin referrer directory — that suppresses their updates and flags them.
“The portal link shows the wrong clinic’s branding.” The branding and routing come from the org in the portal address. Share the exact link from Admin → Referral Portal — a link without (or with the wrong) org won’t resolve to your practice.

Still stuck? The portal footer reads “Powered by Hero EMR” on every screen — email support@heroemr.com and we’ll help you trace where an update stopped.

Need help? Email support@heroemr.com.