---
title: Provider Vendor and PBM/Payer Requirements
slug: electronic-prior-auth/guide/provider-vendor-and-pbmpayer-requirements
docTags: 
createdAt: 2026-06-22T17:00:16.806Z
---

**PA.212:** Payer and submitter systems shall be able to send and receive PDF attachments at a minimum.

**PA.213:** Participant applications shall not allow users/systems to respond multiple times to a message the application has already sent. The only exceptions are: the INProcess PAResponse followed by an Approved/Denied PAResponse message; and PARequest/PAResponses when additional information is requested.

**PA.220: **Customers shall support the scenarios detailed in the Message Flow section of this guide.

**S.200:** Customers shall be able to receive syntactically valid maximum and minimum populated messages. Optional data elements (and values therein) shall not cause message failure.

**S.201:** Customers shall ensure all messages are syntactically correct before transmission to Surescripts.

**S.205:** The sender shall ensure the combination of the From and MessageID elements, for all messages including Error, is unique for at least 18 months. Surescripts recommends an unformatted Globally Unique Identifier (GUID).

**S.206:** System shall support user entry and display of up to three digits to the right of the decimal place, without the system rounding or truncating. The decimal point is represented by a period and shall be used as follows:

- Only when there are significant digits to the right of the decimal
- When there is a digit before and after the decimal point
- Not with whole numbers

For example, consider the following possible values:

| **Correct Format Examples** | **Incorrect Format Examples** |
| --------------------------- | ----------------------------- |
| 2.5                         | .27                           |
| 0.15                        | 3.00                          |
| 21                          | 14.                           |

**S.209: **The customer shall implement and maintain a Surescripts approved drug compendia that is updated at least monthly.