Telemedicine License & Standard Operating Procedure (SOP)

A dense, compliance-first overview of our licensed telemedicine service, covering legal basis, scope, workflow controls, data protection, documentation, and reporting obligations.

License Number
10109000565
Clinic License Issued
8 June 2024
Clinic License Valid Until
31 December 2033
Telemedicine Permission Valid Until
31 October 2026

Legal Basis and Oversight

Approved under the Department of Thai Traditional and Alternative Medicine (DTAM), Ministry of Public Health. Telemedicine operations are supervised by licensed Thai Traditional Medicine practitioners and adhere to current PT.33 documentation and reporting rules.

Who We Are

Herb Plug Thai Traditional Medicine Clinic is among the first clinics in Thailand approved to provide telemedicine under DTAM. The clinic is owned by GACP CO., LTD. Our telemedicine service operates under OG.th (Only GACP | Herb Plug Clinic).

Scope of Service

  • Thai Traditional Medicine consultations delivered remotely via our secure platform
  • Assessment for suitability, contraindications, and risk factors before any prescription
  • Issuance and linkage of prescriptions to the patient profile and HN member card
  • Integration with og.th ( Only GACP | Herb Plug Clinic) for treatment requests, controlled dispensing, and PT.33 records
Emergency conditions are excluded from telemedicine and must be referred to in-person care immediately.

Our Secure and Approved SOP Process

  1. Account Setup and 2-Factor Access
    • Sign-up via Line, email, or phone with mandatory two-factor authentication (2FA).
    • All systems are hosted on ISO27001-certified secure servers located in Thailand (data residency).
    • Role-based access control (RBAC) and least-privilege enforced for all staff accounts.
  2. ID and Identity Verification
    • KYC via SumSub (ISO27001-compliant); ID validity, liveness, and age verified.
    • Applicant face matched to ID with fraud signals screened; results logged and retained.
  3. Patient Intake
    • Structured intake captures medical history, chief complaint, medications, allergies, height/weight, and relevant vitals if available.
    • Patient consent obtained digitally; consent artifacts stored with immutable audit trail.
  4. Consultation
    • Guided remote consultation using structured questionnaires, asynchronous submissions, or real-time interaction as required by the case.
    • Licensed practitioner reviews submissions; may request clarifications or additional evidence prior to decision.
    • Ineligible or red-flag cases are escalated or referred to in-person care with documented rationale.
  5. Prescription and HN Member Card
    • Upon approval, patient provides ID photo for HN card issuance; card is linked to profile.
    • Prescription details are bound to the patient account and time-limited per regulation (e.g., 30-day PT.33).
  6. Treatment Requests and Dispensing
    • Prescriptions integrate with og.th ( Only GACP | Herb Plug Clinic) to accept treatment requests; each request is reviewed against prescription scope and stock controls.
    • Approved requests are dispensed with automatic PT.33 document association and inventory decrement.
  7. Prescription Expiry
    • System access for treatment requests is paused on expiry; renewal workflow guided through the platform.
  8. Regulatory Compliance
    • All treatment requests and dispensation events are tied to the patient’s PT.33 document.
    • Dispensing reports prepared and submitted to DTAM using PT.27/PT.28 forms as applicable.
    • Reporting submitted on the required cadence with immutable, time-synced audit logs.

Compliance Matrix

Area
Control/Process
Standard/Authority
Identity & Age Verification
SumSub KYC, liveness, face match, fraud checks
ISO27001 vendor; DTAM telemedicine guidance
Access Security
2FA, RBAC, least privilege, session timeouts
ISO27001; industry best practice
Data Residency & Hosting
Thai-based secured infrastructure, encrypted at rest and in transit
ISO27001; Thai privacy regulations
Clinical Governance
Licensed practitioner review, exclusion criteria, referral policy
DTAM/Thai Traditional Medicine
Documentation
PT.33 linkage, immutable audit logs, controlled retention
DTAM reporting and record-keeping
Dispensing Reporting
Generate and file PT.27/PT.28 for dispensation as required
DTAM forms PT.27/PT.28

Data Protection & Security

  • Transport security via TLS 1.2+; data encrypted at rest with managed keys.
  • Fine-grained audit logs for authentication, KYC events, clinical decisions, dispensing, and reporting.
  • Regular access reviews; background checks for staff with access to sensitive data.
  • Backups, disaster recovery and business continuity tested on a scheduled cadence.

Eligibility, Contraindications, and Referrals

  • Eligibility assessed case-by-case against Thai Traditional Medicine practice and current regulations.
  • Contraindications include acute emergencies, uncontrolled severe psychiatric illness, and other red flags at clinician discretion.
  • Ineligible cases receive written rationale and a referral pathway to in-person care.

Patient Rights, Consent, and Grievance Handling

  • Explicit informed consent captured digitally for telemedicine and data processing.
  • Patients may request access to, or correction of, their records in accordance with law.
  • Grievances can be filed through our support channel; every complaint is logged and reviewed by clinical governance.

Document Retention and Reporting

  • Retention schedules applied to KYC, consent, clinical notes, prescriptions, dispensing records, PT.33, and DTAM submissions (including PT.27/PT.28).
  • Time-synced immutable audit logs facilitate inspection and regulatory audits.

Contact and Verification

Clinic: Herb Plug Thai Traditional Medicine Clinic | Operator: GACP CO., LTD. | License: 10109000565

For regulator verification or inquiries, please contact us through the official og.th ( Only GACP | Herb Plug Clinic) channels.

Frequently Asked Questions

Is the service legally authorized?

Yes. Telemedicine permission is valid until 31 October 2026 under DTAM oversight. Operations comply with PT.33 and DTAM reporting requirements.

How is my identity verified?

We use SumSub for KYC (ISO27001-compliant) with liveness and face match checks. All events are logged and subject to audit.

Where is my data stored?

All data is hosted within Thailand on ISO27001-certified infrastructure with encryption at rest and in transit.

What happens when a prescription expires?

System access for treatment requests is paused. Patients may request a new consultation for renewal in compliance with current regulations.

Proceed with Telemedicine Consultation

Begin a secure, licensed consultation. Identity verification and consent are required.

This service is provided by Herb Plug Thai Traditional Medicine Clinic under GACP CO., LTD. within the legal framework of Thailand. For emergencies, call local emergency services.