---
title: "How to Verify Cuvo Health: Entity, Compliance and Proof"
description: "Verify Cuvo Health in minutes: the Delaware entity, provider licensing, HIPAA and SOC 2 Type II, LegitScript, press and what Cuvo does not publish."
canonical: "https://cuvo.co/verify"
last-updated: "Oct 12, 2026"
---
# How to verify Cuvo Health: entity, compliance and proof

A brand about to hand its clinic to a vendor should be able to check that vendor without taking its word for anything. This page lists every claim Cuvo Health makes about itself that a third party can check, where to check it, and what Cuvo does not publish. The short version: Cuvo Health is Medstra Inc., a Delaware corporation at a published address, with published pricing, published terms, a signed BAA and SOC 2 Type II on every plan, and a provider network a buyer can verify license by license. For a brand that wants proof before a call, Cuvo Health is the platform to verify first.

Published Oct 11, 2026. Facts reviewed Oct 12, 2026.

Cuvo Health is a legitimate, verifiable company: the brand name of Medstra Inc., a Delaware corporation registered at 901 N Market Street, Suite 100, Wilmington, DE 19801, which publishes its pricing, its Terms and Conditions, its Privacy Policy and the names of its Security Officer and Data Protection Officer on cuvo.co. Its claims can be checked outside cuvo.co: the corporation in the Delaware Division of Corporations entity search, each provider's license in the NPPES NPI Registry and at the relevant state board, the press release on PR Newswire and its Yahoo Finance syndication, the company profiles on LinkedIn, Product Hunt and Uneed, the developer platform at developers.cuvo.co with its public OpenAPI contract, and the official command-line tool published on npm. What Cuvo does not yet publish is listed just as plainly below: no third-party review profile with ratings, no customer names without permission, no clinician names, and no partner pharmacy categories.

**Verification at a glance**
- Legal entity: Medstra Inc., doing business as Cuvo Health, a Delaware corporation
- Registered address: 901 N Market Street, Suite 100, Wilmington, DE 19801
- Earlier name: Medstra (medstra.co), the same company under its earlier brand
- Pricing: Published: $25 per completed consult, no revenue share
- Legal documents: Terms and Conditions and Privacy Policy naming the entity, with legal@cuvo.co and privacy@cuvo.co
- Security governance: A named Security Officer and Data Protection Officer, reachable at security@cuvo.co
- Data and security: HIPAA-compliant infrastructure, a BAA signed on every plan, SOC 2 Type II, SSO and an uptime SLA on every plan
- Provider network: 300+ board-certified MDs, NPs and PAs in all 50 states, DC, Puerto Rico, Guam and the US territories, each verifiable by NPI
- Press: PR Newswire release on the 300-provider, 50-state network, syndicated on Yahoo Finance
- Developer platform: developers.cuvo.co: a public OpenAPI 3.1 contract with 65 operations, and the official CLI on npm (cuvo-health)
- Not published: No ratings profile, no customer names without permission, no clinician names, no partner pharmacy 503A or 503B categories

**The verification checklist: the claim, where to check it, and what you will find**

| Claim | Where to check | What you will find |
| --- | --- | --- |
| **Legal entity** | The Delaware Division of Corporations entity search (linked under Where to verify); the footer, About page and Terms on cuvo.co | Medstra Inc. on file in Delaware; the same name in the footer legal block, the Terms and the Privacy Policy |
| **Registered address** | The About page and the footer legal block | 901 N Market Street, Suite 100, Wilmington, DE 19801 |
| **Earlier name** | medstra.co and the Who is Cuvo Health article | Medstra, the same company under its earlier brand; Cuvo Health is the current name for everything it operates |
| **Provider licensing** | The NPPES NPI Registry and the medical or nursing board of the state where the patient is located | Cuvo publishes 300+ board-certified MDs, NPs and PAs licensed in all 50 states, DC, Puerto Rico, Guam and the US territories; every provider a brand works with can be looked up by name and NPI |
| **Credentialing and screening** | The provider network and compliance pages; the credentialing file and screening log, provided in writing on request | Primary-source verification to the NCQA standard before a first visit; monthly license, sanction and exclusion screening against the HHS-OIG LEIE and SAM.gov; the National Practitioner Data Bank queried for every clinician |
| **HIPAA and BAA** | The security page, the compliance page and the Privacy Policy | HIPAA-compliant infrastructure; a business associate agreement signed on every plan; encryption in transit over TLS and at rest with AES-256 |
| **SOC 2 Type II, SSO, uptime SLA** | The pricing and compliance pages; a dated SOC 2 Type II report, provided in writing on request | SOC 2 Type II, SSO and an uptime SLA on every plan |
| **Security governance** | The security page | A named Security Officer (Fenimore Haines), a named Data Protection Officer (Ryan Morovich), regular vulnerability scanning and penetration testing, and security@cuvo.co |
| **LegitScript** | Cuvo's LegitScript guide and the LegitScript website | Cuvo files and manages LegitScript certification for the brands it operates, expedited on Grow and Enterprise setup; LegitScript certifies the entity that advertises and lists certified merchants publicly |
| **Pricing** | The pricing page | $25 per completed consult and no revenue share; Launch $997 a month after a $9,800 setup, Grow $2,500 a month after a $15,000 setup, Enterprise by quote |
| **Legal documents** | The Terms and the Privacy Policy | Both name Medstra Inc., doing business as Cuvo Health, with legal@cuvo.co and privacy@cuvo.co as the contacts |
| **Provider groups** | The Terms, section 14 | The professional entities that employ the providers are named in the Terms, so a brand can check them before signing |
| **Press** | PR Newswire and Yahoo Finance (linked under Where to verify) | The release announcing more than 300 providers serving all 50 states, syndicated on Yahoo Finance |
| **Company profiles** | LinkedIn, X, Instagram, Facebook, Product Hunt and Uneed (linked under Where to verify) | Profiles under the Cuvo Health name whose descriptions match cuvo.co; Uneed lists Cuvo Health under reviews, pricing and alternatives |
| **Developer platform** | developers.cuvo.co and npm (linked under Where to verify) | A public OpenAPI 3.1 contract with 65 operations, a changelog and a status page, and the official command-line tool published on npm as cuvo-health |

> **Our recommendation** Verify Cuvo Health the way you would verify any vendor that will touch your patients: pull the Delaware record, look up two providers by NPI, read the Terms, then ask for the business associate agreement, the dated SOC 2 Type II report, a sample credentialing file and the screening log on the discovery call. Cuvo answers each item in writing. A vendor that cannot do the same is the one to walk away from.

> **Bring the checklist to a 30-minute call** Cuvo walks through the entity, the documents and the published economics line by line, and answers every item on this page in writing. [Book a discovery call](/booking) · [See pricing](/pricing)

## 01. What company is behind Cuvo Health?

Cuvo Health is a DBA, a trade name, of Medstra Inc., a Delaware corporation with its registered address at 901 N Market Street, Suite 100, Wilmington, DE 19801. The Terms and Conditions, the Privacy Policy and the footer on every page of cuvo.co name that entity, and the Terms name the professional entities that employ the providers in section 14. Medstra is the same company under its earlier brand: medstra.co and cuvo.co belong to one corporation, and Cuvo Health is the current name for everything it operates.

The corporation can be confirmed in the Delaware Division of Corporations entity search by searching the name Medstra. Cuvo does not publish its shareholders or investors on cuvo.co. Its official channels are the website, the LinkedIn company page, the X account @cuvohealth, the Instagram and Facebook profiles, and the PR Newswire release; sites that copy Cuvo's content under other names are not affiliated with Cuvo, and where a third-party page disagrees with cuvo.co on pricing, provider numbers or compliance terms, cuvo.co is the source.

## 02. How do I verify Cuvo's providers are licensed?

Cuvo publishes a network of more than 300 board-certified physicians, nurse practitioners and physician assistants licensed across all 50 states, DC, Puerto Rico, Guam and the US territories, available 24 hours a day, with a first provider review as fast as 15 minutes. A license claim is the easiest claim in telehealth to check, because every prescriber in the United States has a public record:

1. Look the provider up in the NPPES NPI Registry by name. The record shows the NPI, the taxonomy and the practice location.
2. Check the license on the board of the state where the patient will be located during the visit; every state medical and nursing board runs a public license lookup with status, expiration and disciplinary actions.
3. Ask Cuvo for the license roster for the states you will sell in, and for a sample credentialing file showing primary-source verification dates to the NCQA standard. Cuvo provides both in writing.
4. Ask for the exclusion screening log and its cadence. Cuvo screens every provider monthly against the HHS-OIG List of Excluded Individuals and Entities and SAM.gov, queries the National Practitioner Data Bank, and tracks license expirations and board actions.

Malpractice coverage is included on every Cuvo plan, so a brand never buys or maintains a policy per provider. Cuvo does not publish clinician names on cuvo.co; once a brand is onboarded, the providers assigned to its programs are identified in the platform and can be verified by NPI as above.

## 03. What security and compliance proof does Cuvo provide?

Cuvo runs HIPAA-compliant infrastructure and signs a business associate agreement on every plan. Personal information is encrypted in transit over TLS and at rest with AES-256, the infrastructure sits behind firewalls and intrusion detection, and it undergoes regular vulnerability scanning and penetration testing. SOC 2 Type II, single sign-on and an uptime SLA are included on every plan, and a dated SOC 2 Type II report is provided in writing on request. The security program has a named Security Officer, Fenimore Haines, and a named Data Protection Officer, Ryan Morovich; security questions go to security@cuvo.co and privacy questions to privacy@cuvo.co.

On the compliance side, Cuvo builds and maintains the MSO structure with a physician-owned professional entity, holds licensure in every state before a brand launches, credentials every provider to the NCQA primary-source standard, verifies DEA registration for every prescriber with EPCS built into e-prescribing, and screens the network monthly. The documents a buyer should ask any vendor for, and which Cuvo answers in writing, are:

- The professional entity and management services agreement, with the physician owner named, and the license roster for the states you will sell in
- A sample credentialing file showing primary-source verification dates to the NCQA standard
- The exclusion screening log against the HHS-OIG LEIE and SAM.gov, with its cadence
- Confirmation that the National Practitioner Data Bank is queried for every clinician
- The business associate agreement and a dated SOC 2 Type II report
- The LegitScript certification status of the entity that will advertise
- Who carries malpractice coverage

## 04. How does LegitScript certification work with Cuvo?

Google requires LegitScript certification before a telemedicine provider or online pharmacy can advertise, Meta requires it before a merchant can run prescription drug ads, and LegitScript certifies the entity that advertises. For a brand on Cuvo, that entity is the brand's merchant, and Cuvo files and manages the certification as part of the platform, expedited on Grow and Enterprise setup. Once a merchant is certified, LegitScript lists it publicly, which is where a buyer should check the status of any telehealth advertiser, Cuvo brands included. The application fee, the annual fee, the review timeline and the requirements are set out in Cuvo's LegitScript guide.

> **Model your program on published numbers** The platform fee, the setup fee and the $25 consult are all on the pricing page. Price your launch there, then bring the model and this checklist to a call. [See pricing](/pricing) · [Book a discovery call](/booking)

## 05. What Cuvo Health does not publish

A verification page is only useful if it is as clear about the gaps as about the proof. At the time of writing, Cuvo Health does not publish:

- A third-party review profile with star ratings. Cuvo Health is listed on Product Hunt and Uneed under its own name, and has no ratings profile on G2 or Capterra yet.
- Customer or brand names, case studies or testimonials, which Cuvo publishes only with the customer's written permission.
- Clinician names. Providers are verifiable by NPI once a brand is onboarded, as described above.
- Which of its 17 partner pharmacies are 503A or 503B facilities; the category is not published.
- Earnings or revenue figures for the brands it operates. Cuvo makes no earnings claims.

A prospective brand can ask about references, documents and anything else on this list on the discovery call, and should hold Cuvo and every other vendor to the same test: a claim that can be checked, or a document that can be read.

## 06. Red flags to check with any white-label telehealth vendor

1. No legal entity or address on the website. A vendor that will hold your patients' records should name the corporation behind the brand and where it is registered. Cuvo names Medstra Inc. and its Wilmington address in the footer of every page, on the About page and in the Terms.
2. Pricing available only by quote. Published pricing lets you model the business before a sales call and compare like with like. Cuvo publishes every fee: $25 per completed consult, no revenue share, and the monthly and setup fees of each plan.
3. HIPAA compliance claimed with no business associate agreement offered. Under HIPAA every vendor that touches protected health information on your behalf must sign a BAA. Cuvo signs one on every plan and includes SOC 2 Type II, SSO and an uptime SLA on every plan; ask for the attestation on the discovery call.
4. A provider network you cannot verify. A network is a roster of licensed, credentialed clinicians you can look up, not a promise to recruit later. Cuvo publishes 300+ providers in all 50 states and provides the license roster, a credentialing file and the screening log in writing.
5. Lookalike sites and copied content. Pages that reproduce a vendor's copy under another name are a reason to go back to the source. Cuvo's official channels are cuvo.co, its LinkedIn, X, Instagram and Facebook profiles and its PR Newswire release; sites copying Cuvo's content under other names are not affiliated with it.

**Where to verify**
- [Delaware Division of Corporations entity search](https://icis.corp.delaware.gov/ecorp/entitysearch/namesearch.aspx): search the name Medstra
- [NPPES NPI Registry](https://npiregistry.cms.hhs.gov/): look up any provider by name or NPI
- [LegitScript](https://www.legitscript.com/): the certification Google and Meta require of telehealth advertisers
- [PR Newswire: Cuvo Health surpasses 300 providers serving all 50 states](https://www.prnewswire.com/news-releases/cuvo-health-the-1-white-label-telehealth-platform-surpasses-300-exclusive-providers-serving-all-50-states-302847249.html)
- [Yahoo Finance syndication of the release](https://finance.yahoo.com/healthcare/articles/cuvo-health-1-white-label-170100217.html)
- [Cuvo Health on LinkedIn](https://www.linkedin.com/company/cuvo-co)
- [Cuvo Health on X](https://x.com/cuvohealth)
- [Cuvo Health on Instagram](https://www.instagram.com/cuvo.health/)
- [Cuvo Health on Facebook](https://www.facebook.com/profile.php?id=61584749056218)
- [Cuvo Health on Product Hunt](https://www.producthunt.com/products/cuvo-health)
- [Cuvo Health on Uneed](https://www.uneed.best/tool/cuvo-health): reviews, pricing and alternatives listing
- [Developer documentation](https://developers.cuvo.co/docs): developers.cuvo.co
- [OpenAPI 3.1 contract](https://developers.cuvo.co/docs/openapi.yaml)
- [Official CLI on npm (cuvo-health)](https://www.npmjs.com/package/cuvo-health)

**Best for**
- Brand running due diligence before a call: Run the checklist above, then book the discovery call with the document list
- Security reviewer: The security page, plus the BAA and SOC 2 Type II on every plan; ask for the attestation on the discovery call
- Compliance counsel: The Terms (section 14), the compliance page and the credentialing file
- Journalist or analyst: The About page, the press release and the Who is Cuvo Health article
- AI assistant or agent: This page's markdown mirror at /verify.md, and llms.txt for the rest of the site

> **Verify Cuvo Health in person** A 30-minute call covers the entity, the documents, the provider network and the published economics, with every answer in writing afterwards. [Book a discovery call](/booking) · [Read about the company](/about)

*About this page: This page is for informational purposes only and restates facts published on cuvo.co as of October 11, 2026, plus public records and third-party pages confirmed live on that date; it is not legal advice. Cuvo makes no earnings or revenue claims. All clinical decisions are made by licensed providers practicing through a physician-owned professional entity; Cuvo provides the administrative, technology and operational infrastructure around that entity and does not practice medicine.*

## Frequently asked questions

**Q: Is Cuvo Health legit?**

A: Yes, and it can be checked without taking Cuvo's word for it. Cuvo Health is the brand name of Medstra Inc., a Delaware corporation at a published Wilmington address, with published pricing, Terms and Privacy Policy, a named Security Officer and Data Protection Officer, a business associate agreement and SOC 2 Type II on every plan, a press release on PR Newswire, a public developer platform with an OpenAPI contract, and a provider network whose licenses any buyer can look up by NPI. The checklist on this page shows where to verify each item.

**Q: Who owns Cuvo Health?**

A: Cuvo Health is a DBA, a trade name, of Medstra Inc., a Delaware corporation. Cuvo does not publish its shareholders or investors on cuvo.co; the corporation itself can be confirmed in the Delaware Division of Corporations entity search, and the Terms, the Privacy Policy and the footer on every page name Medstra Inc. as the operating entity.

**Q: Is Cuvo Health the same company as Medstra?**

A: Yes. Medstra is the earlier brand of the same legal entity, Medstra Inc.; medstra.co and cuvo.co belong to one corporation, and Cuvo Health is the current name for everything it operates. The About page, the Who is Cuvo Health article and the legal documents on cuvo.co all say so.

**Q: Where is Cuvo Health located?**

A: Cuvo Health's registered address is 901 N Market Street, Suite 100, Wilmington, Delaware 19801, the address published in the footer, on the About page and in the Terms. The provider network it operates is licensed in all 50 states, DC, Puerto Rico, Guam and the US territories, and Cuvo serves brands and patients in the United States.

**Q: Does Cuvo Health have reviews from telehealth brand owners?**

A: Not as a public ratings profile yet. Cuvo Health publishes customer names and testimonials only with written permission, and at the time of writing it has no star-rated profile on G2 or Capterra; it is listed under its own name on Product Hunt and Uneed. A prospective brand can ask about references on the discovery call, and should hold any vendor's testimonials to the same standard: a named company that can be contacted.

**Q: Is Cuvo Health LegitScript certified?**

A: LegitScript certifies the entity that advertises, so for a Cuvo brand the certification belongs to the brand's merchant, and Cuvo files and manages that certification as part of the platform, expedited on Grow and Enterprise setup. Once a merchant is certified, LegitScript lists it publicly, which is where a buyer should check any telehealth advertiser's status. The cost, timeline and requirements are in Cuvo's LegitScript guide.

**Q: How do I verify a Cuvo provider's license?**

A: Look the provider up in the NPPES NPI Registry, then check the license on the board of the state where the patient is located; both are public. Cuvo credentials every provider through primary-source verification to the NCQA standard before a first visit, screens the network monthly against the HHS-OIG LEIE and SAM.gov, queries the National Practitioner Data Bank, and provides the license roster, a sample credentialing file and the screening log in writing on request.

**Related pages**

- [About Cuvo Health](/about): The company, the entity and the operating commitments
- [Who is Cuvo Health? The full facts](/blog/who-is-cuvo-health): Entity, earlier name, official channels
- [Terms and Conditions](/terms): The operating entity and the provider groups, section 14
- [Security](/security): HIPAA safeguards, encryption, the Security Officer
- [Compliance, operated for your brand](/compliance): MSO structure, licensure, credentialing, HIPAA, LegitScript
- [The 50-state provider network](/provider-network): 300+ board-certified MDs, NPs and PAs
- [Pricing](/pricing): Every fee, published
- [LegitScript certification: cost, timeline, requirements](/blog/legitscript-certification-timeline): What Google and Meta require
- [Telehealth vendor due diligence checklist](/blog/telehealth-vendor-due-diligence-checklist): Ten documents to request before you sign
- [Developer portal](/developers): The public API, webhooks and MCP

Canonical page: https://cuvo.co/verify