Telehealth consent

How do we capture the telehealth consent the state and the payer require before the first virtual visit, in the right form, and store it so later visits do not ask again?

Make the consent a condition of the first virtual visit link. When a virtual visit is booked, Callvu checks whether a valid telehealth consent exists for the patient and the state they will be in, selects the consent the patient's state, the provider's policy and the payer require (the content, the language, whether verbal consent documented by the provider suffices or a written one is required, the annual or per-episode renewal), delivers it on the patient's phone with the plain explanation of the modality, its limits, privacy and the right to stop, captures the signature or the documented verbal consent, routes a minor, a representative or a patient in a state with special rules to the clinic in the Decision Desk, writes the consent to the EHR with its validity, and releases the visit link only once it is on file.

In scopeSimpleCallvu moves: write back

Talk to an expert Try it in the sandbox

Last updated November 7, 2026.

The problem today

The visit link went out, the visit happened, and the consent the state requires was never captured because the booking system did not know it was a first virtual visit.

Today, without Callvu

Virtual visits are booked like any other, and the consent is an afterthought: a line read aloud by the provider at the start, sometimes, documented in a note, sometimes. The patient is in another state with its own telehealth consent rule; the payer's policy requires written consent for the service to be billable; the audit finds the gaps across a year of visits.

Telehealth consent is set by the state where the patient is located (many require informed consent to telehealth, some in writing, some with specific content on the modality, its limitations, privacy and alternatives), by the payer (Medicare and the state programs require the consent to be documented, some annually), and by the provider's policy. The consent is one fact with a validity period, and the visit link should depend on it.

A consent captured before the link is sent is a consent that exists.

How it runs

From the requestto the system of record.

A virtual visit is booked, or a patient without a valid telehealth consent on file is scheduled for one. Callvu checks the consent and opens the step where needed.

Patient or personal representative: Reads the consent on their phone and signs, or gives verbal consent that the provider documents.
Provider: Documents verbal consent where the rule allows it and answers questions.
Clinic staff: See consent status before the visit and decide unusual cases in the Decision Desk.
Callvu: Checks the file, selects the consent, delivers, captures, routes, writes and gates the link.

Check and select
The booking's modality, the patient's location at the time of the visit, the provider's licensure in that state, the payer and the patient's age and status select the consent required: the state's content and form (written or documented verbal), the payer's documentation and renewal rule, the provider's policy, the language; a valid consent on file within its validity skips the step.
Deliver and capture
The consent is delivered on the patient's phone with the readiness check, in plain terms: what telehealth is, its limitations, the privacy and security measures, the possibility of a technical failure and the fallback, the right to stop and seek in-person care, and how records are kept; the patient signs, or where the rule allows verbal consent the provider documents it on the secure screen at the start of the visit.
Decide
A signed consent in the right form proceeds by rule; a minor under the state's rules, a representative whose authority is not on file, a patient located in a state where the provider is not licensed, or a patient who declines goes to clinic staff in the Decision Desk with only the allowed outcomes (verify the representative, convert to an in-person visit, cancel, or document the verbal consent).
Write back and gate
The consent with its form, the state, the validity period and the signer is written to the EHR and the registration record, the visit link is released only once the consent is on file, and the renewal rule re-opens the step before the consent expires.

Where it ends: Every first virtual visit had the consent the patient's state and the payer require before the link went out, and the EHR holds it with its validity so later visits proceed without asking again. The Decision Trace shows the selection and any decision; the Audit Trace shows the delivery, the signature and the link release with time.

Runtime enforcement

What is enforcedwhile the work runs.

The regulations preloaded in Callvu Studio and the bank's own policies, applied as steps that run, not lines in a binder. A step that breaks a rule does not run, so a completed run was compliant.

Regulations

State telehealth informed consent statutes and the HIPAA Privacy and Security Rules for the platform: Most states require the provider to obtain and document the patient's informed consent to telehealth, several in writing and with content on the modality, its limitations, privacy, the right to withdraw and alternatives (for example the state medical board rules and telehealth acts), and the consent must be obtained under the law of the state where the patient is located; the platform and the record must meet the HIPAA Privacy and Security Rules (45 CFR 164.302 to 164.318) with a business associate agreement with the vendor.
Medicare and state program telehealth documentation rules: Medicare requires that the patient's consent to telehealth services (and to certain remote services, annually) be documented in the record, and state programs set their own written or verbal consent and documentation rules for the service to be payable; the selection applies the payer's rule.
Provider licensure and interstate practice rules: The provider must be licensed or authorized in the state where the patient is located at the time of the visit (or covered by a compact); the readiness check captures the location and the consent step checks the licensure.

Company policies

The visit link is released only when a valid consent is on file; no consent, no link.
The consent's form follows the patient's state at the time of the visit and the payer, not a single house form.
Verbal consent is documented on the secure screen where the rule allows it, never assumed from the note.
The EHR is the system of record for the consent and its validity.

Controls

Consent check on booking with validity.
State, payer and policy selection.
Secure delivery and signature or documented verbal consent.
Decision Desk for minors, representatives, licensure and declines.
EHR write with validity.
Link gating and renewal re-open.

Clocks and deadlines

Before the first virtual visit: The consent must be on file before the link is released.
Validity and renewal: The state's or the payer's period (for example annual), re-opened before expiry.

Documents and checks

The consent selection with the state and payer rule
The consent as delivered and signed, or the documented verbal consent
Any clinic decision
The EHR record with validity

In the Decision Trace

The selection and the rules applied.
Any decision and the person.

In the Audit Trace

The delivery and the signature with time.
The link release.
The write and the renewal.

The handoff

Between the front doorand the back office.

The front door

The patient's phone with the telehealth readiness check; the provider's screen for a documented verbal consent.

The back office

Clinic staff see consent status and decide only unusual cases; billing finds the consent in the EHR.

The Decision Desk

A minor, an unverified representative, a patient in a state without provider licensure or a decline goes to clinic staff in the Decision Desk with only verify, convert to in-person, cancel, or document verbal consent.

Proof

In scope.Proof at scale, not one process at a time.

The kind of process Callvu runs in production for customers in this industry. Ask for a reference on this exact process. The results below are the industry's published proof; each claim code links to its record on agents.callvu.com.

23 hospitals in the Ministry of Health network run on Callvu.

Across Callvu customers

More than 1,000 processes are live across Callvu customers.

Across Callvu customers

Questions

What buyers ask next,answered plainly.

Which state's rule applies?

The state where the patient is located at the time of the visit; the readiness check captures the location and the consent is selected for it, along with the payer's rule.

Is verbal consent enough?

Where the state and the payer allow it, documented by the provider on the secure screen at the start of the visit; where written consent is required, the patient signs on their phone first.

Does every visit need a new consent?

No. The consent has a validity under the rule (often annual), is stored in the EHR, and later visits proceed until the renewal re-opens the step.

Related processes

Telehealth visit readiness Procedure and treatment consents by type General consent to treat Notice of Privacy Practices acknowledgment Try it in the sandbox All healthcare processes

Bring this process, or the one that costs you most.

We build it against your policies and your systems, train your team and stay with you through launch. You are live in weeks.