VisitLock isn't a replacement for your EHR, your practice management software, or your EVV vendor. It's the identity layer on top of all of them — Axxess, HCHB, WellSky, HHAeXchange, Sandata, AlayaCare, AxisCare, KanTime, Tellus, Therap, MatrixCare, in-house systems. We get the same question on every demo: "Why pay for this when EVV is bundled?" Here's the honest answer — three reasons, no marketing math.
Think of it like physical security. Your EHR or practice management system is the door — scheduling, billing, charting, claims. EVV is the lock — federally mandated since the 21st Century Cures Act of 2016. VisitLock is the camera and the ID check at the door — biometric proof of who actually showed up. Whatever runs Layer 1 and Layer 2 in your agency, we sit on top.
Scheduling, charting, billing, claims submission. The operational backbone every agency runs on. Whatever you use today, keep using it.
GPS clock-in/out for state Medicaid mandates. Confirms a phone was near an address. Federally required since 2016.
Biometric proof of who arrived. The only layer that verifies the right person, not just the right phone.
No procurement battle. No data migration. No retraining your back-office staff. We sit on top of whatever EHR and EVV you run today, pull visit exports via API or CSV, and bind a biometric check to every visit. Same buyer your existing vendors sell to — sold for the opposite fear.
Every major EVV product on the market — bundled inside an EHR or sold standalone — checks GPS at a roughly 50-meter radius and stops there. There is no biometric identity check inside that radius. Anyone with the aide's login credentials, a family member holding the aide's phone, or a fraudster running a $5 GPS spoofing app passes cleanly.
When a UPIC investigator opens your file and asks "prove this aide was actually there" — your current system hands you a GPS dot. VisitLock hands you a face match with a tamper-proof timestamp. That's the entire difference between a documentation defense that works and one that collapses.
Biometrics are the only countermeasure that travels with the person, not the device.
There are publicly available guides — one specifically targeting EVV systems, live since 2019 — that teach anyone how to defeat GPS-only EVV using a free remote-control install or a $5 GPS spoofing app. Step-by-step. Anyone with a $100 Android phone can do it in five minutes. The technique works against every name-brand EVV vendor because they all share the same GPS-only architecture.
New York State paid $14.5 billion for personal care services with no matching EVV record. That's not a "missing EVV" problem — those are agencies with EVV who got beat by the architecture. NY State paid another $11.6 million for visits under 8 minutes that were physically impossible.
Your EHR can't fix this because GPS-only is the entire EVV product category — that's how every vendor in the space ships. VisitLock is the only system that closes the gap. Biometrics are the only thing that can't be spoofed remotely.
Every EHR and practice management vendor pitches the same thing — "run your agency more efficiently." That's valuable, but it doesn't help you on the day a UPIC letter arrives. The June 2025 DOJ National Health Care Fraud Takedown blocked $4 billion in payments using 42 CFR 405.371 alone — no court order, no notice, no appeal.
FCA penalties run $13,508 to $27,018 per false claim plus treble damages. A single fraudulent aide on a single patient over two years generates 100+ false claims and multi-million-dollar exposure. The OIG has documented cases where cooperative agencies fired the bad actor and still had to repay.
VisitLock's biometric proof is the evidentiary shield that means CMS doesn't have grounds to suspect fraud in the first place. Our pricing — $299 to $499 per month — is rounding error compared to the smallest possible audit defense cost.
Whether you're running Axxess, HCHB, WellSky, HHAeXchange, Sandata, AlayaCare, AxisCare, KanTime, Tellus, Therap, MatrixCare, or a state EVV aggregator — the gap is the same. Here's what's missing.
The aide does their normal clock-in inside whatever EVV app you already use. They also open VisitLock for the biometric check. Both records exist independently. You see both in your VisitLock dashboard. No integration required, no migration, no procurement battle. Zero permission needed from your existing vendor.
Once you're past the trust threshold and ready to consolidate visibility, VisitLock imports visit data from your existing EVV via CSV or API. We support every major export format on the market today. We match every visit to its biometric counterpart by aide, timestamp, and address. Discrepancies surface as exceptions on a single dashboard.
Once VisitLock has enough agency network presence, we list on the integration marketplaces of the major EHRs — Axxess, HCHB, WellSky, AlayaCare, and others — as the recommended identity layer. By that point, those vendors have the same incentive to integrate with us that they have with their other partners: their customers are asking for it.
Keep the EHR and EVV you've already trained your team on. Add the layer no other vendor in the category gives you.
Book a Demo →