HEALTH INTEROPERABILITYREVIEW

Move data. Preserve meaning. Prove the exchange.

Newsroom

Health data exchange, standards, and infrastructure intelligence

Reporting on nationwide exchange, FHIR implementation, certification policy, identity, consent, terminology, public-health connectivity, and the systems responsible for moving usable health information.

Terminology Governance

VSAC and PHIN VADS serve different value-set programs

NLM's VSAC is the central authority and repository for official CMS electronic clinical quality measure value sets. CDC's PHIN VADS distributes value sets tied to public-health and HL7 implementation-guide use. Teams should identify the governing program before choosing, versioning, or migrating terminology content.

Smile's shared FHIR layer needs change-impact evidence

Smile Digital Health presents Smile Omni as a shared FHIR-native foundation for data, compliance, quality, clinical logic, automation, and operational workflows. A shared layer can reduce duplication, but it also creates common dependencies: every version, profile, terminology, rule, tenant, interface, and workflow change needs a documented impact population, regression result, exception, approval, and release record.

PointClickCare transitions need episode-and-facility identity

PointClickCare describes connecting hospitals, health plans, ACOs, HIEs, and post-acute providers to encounter and transition information across care settings. Before a signal opens work, the receiving organization must resolve the patient, source facility, care setting, encounter, longitudinal episode, event correction state, attributed population, and intended recipient.

Availity connectivity needs trading-partner route receipts

Availity positions Intelligent Gateway for nationwide payer-provider administrative connectivity across X12 transactions, API modes, and selected FHIR exchange. A connection claim becomes operational evidence only when a buyer can name the trading partners, transaction and version, route, identities, acknowledgements, rejections, retries, reconciliation, and accountable owner.

FHIR R4 subscriptions need a silent-exit reconciliation path

FHIR R4 says Subscription criteria are evaluated against a resource's new value, so no notification is sent when a resource is deleted or updated so that it no longer matches. A subscriber that maintains a working population needs an explicit reconciliation path for those exits rather than treating received push messages as a complete current set.

Netsmart task queues need claim-and-reassignment receipts

Netsmart says CareConnect Inbox supports group and individual task assignment inside Netsmart EHR workflows. A buyer should test the exact custody transition from a shared queue to a named worker, including competing claims, returns, reassignment, service-level clock changes, escalation, closure, and reopening, because a current owner or closed status cannot reconstruct who held responsibility at each step.

Clinical Architecture PIQXL scores need use-case acceptance rules

Clinical Architecture says PIQXL Gateway uses its PIQI Framework to score exchanged patient information and highlight root causes of data-quality issues. A score can direct investigation, but a receiving organization still has to define the exchange population, the measure, the threshold, the exception owner, and whether a particular record is fit for its intended use.

Kno2 Direct payloads need receiver ingestion contracts

Kno2’s official Direct Secure Messaging page describes exchange of PDFs, C-CDA documents, HL7 v2 messages, and FHIR JSON resources over a Direct route. That range makes recipient, payload type, patient match, parsing, acknowledgement, and clinical filing separate obligations; secure delivery is not proof that a receiving workflow used the data correctly.

Iguana interfaces need generation-specific lifecycle records

iNTERFACEWARE says it supports both Iguana 6 and the newer IguanaX, plans to evolve them gradually, and does not intend to force disruptive migrations. Continued product support is important evidence, but each production interface still needs its own version, dependency, security, test, change, stay-or-migrate decision, parallel-run result, rollback plan, and operational acceptance.

Qvera AI mapping scripts need message-level validation

Qvera says its interface engine's AI Companion can generate mapping scripts, debug errored messages, and troubleshoot connectivity across an engine that supports HL7, FHIR, DICOM, X12, and other formats. Generated code can accelerate integration work, but it remains a proposed transformation until representative messages, versions, semantics, exceptions, privacy controls, and production receipts are validated.

CMS Provider Access API needs attribution-and-opt-out state

CMS-0057-F requires impacted payers to share specified patient data through a Provider Access API with in-network or enrolled providers who have a treatment relationship, while maintaining attribution and allowing patients to opt out. Endpoint access alone cannot establish that a provider-patient-data relationship is currently permitted.

1up Formulary API needs plan-and-drug effective snapshots

1upHealth describes a public FHIR R4 formulary API that publishes covered drugs, tiers, restrictions, alternatives, and cost information. A discoverable API response is not an individualized pharmacy claim or a guarantee of current member coverage unless source, plan, drug, effective period, synchronization, restrictions, and uncertainty are retained.

Azure de-identification needs method-and-purpose evidence

Microsoft says Azure Health Data Services can extract, redact, or replace protected-health-information entities in unstructured text for secondary use. A completed job does not establish that the output is anonymous, permitted for the intended recipient, fit for the analysis, or safe to link with other data.

b.well consumer-mediated exchange needs consent-version receipts

b.well Connected Health presents a consumer-mediated health-data network and says patient consent is central to some life-sciences workflows. Consent should be a versioned, purpose- and recipient-specific authorization with downstream receipts; a connected record, app session, or earlier approval does not establish that every later acquisition, disclosure, normalization, or use remains authorized.

Aidbox tenants need explicit FHIR-version boundaries

Health Samurai says Aidbox supports FHIR STU3, R4, R5, and R6, more than 500 implementation guides, custom profiles and terminology, and multitenant access control. Supporting that range does not establish which release, guide, profile, value set, authorization rule, or endpoint governs a particular tenant and exchange.

RCE QHIN lists need designation-and-route timestamps

The Recognized Coordinating Entity distinguishes organizations that completed QHIN onboarding and are designated for TEFCA exchange from candidates still onboarding, and says the rolling list can change. A roster snapshot does not establish the route, relationship, exchange purpose, production status, or time that governed a particular transaction.

Medication history is not an active-medication list

Surescripts presents medication-history, e-prescribing, formulary, benefit, and prior-authorization services as distinct parts of its health-information network. A returned history should remain source evidence until a clinician reconciles patient match, prescriptions, fills, cancellations, reversals, timing, adherence uncertainty, and current intent into an active list.

Datavant's tokenized-record count is not unique-patient reach

Datavant's official site reports one trillion records tokenized annually. That is a provider-reported processing-volume measure, not by itself a count of unique people, longitudinal coverage, usable matches, authorized exchanges, or records delivered for a defined care, payment, research, or operational purpose.

Infor full item loads need a stock-state commit record

Infor says Clinical Bridge can process full item loads of more than 50,000 items in minutes, supports near-real-time updates, and carries stock and non-stock item data. Speed does not establish that one complete item epoch became visible. Preserve the source cutoff, expected batch, staged exceptions, commit policy, visibility time, and stock-state transitions in one load record.

TEFCA exchange needs agreement-and-SOP version pairing

The Recognized Coordinating Entity describes the TEFCA Common Agreement as a contract supported by technical infrastructure, governance, and standard operating procedures, with Version 2 adding FHIR-based exchange. Each production exchange still needs the exact agreement, SOP, technical framework, role, purpose, and implementation version that governed it.

AWS HealthLake transformation needs source-field provenance

AWS describes HealthLake as a managed FHIR persistence layer and says a data-transformation agent can convert legacy clinical documents into queryable FHIR resources. A converted resource still needs source-document identity, field mapping, profile and version, terminology, uncertainty, validation, and receiving-workflow evidence before it can be trusted for use.

Moxe data exchange needs request-to-use lineage

Moxe presents secure clinical-data exchange connecting payers and providers and transforming data for payment and operational uses. Buyers still need to reconstruct the request purpose, permitted scope, source selection, transformation, provenance, delivery, acceptance, and downstream use for every exchange.

Azure API for FHIR retirement needs cutover proof

Microsoft says Azure API for FHIR retires September 30, 2026. The deadline calls for tested migration and rollback evidence—not assumed successor equivalence.

The 2026 ISA is an interoperability reference—not a universal implementation mandate

The Office of the Assistant Secretary for Technology Policy describes the Interoperability Standards Advisory as a public reference for identifying and assessing standards and implementation specifications. Inclusion helps planners compare maturity and use cases, but applicability, required version, conformance criteria, and production obligation still come from the controlling program, rule, contract, certification, or exchange agreement.

A Health Gorilla reconciled chart must preserve conflicting source records

Health Gorilla presents a pipeline that finds, matches, translates, de-duplicates, reconciles, traces, and delivers multi-source health data. A unified chart can reduce review burden, but a selected value must not erase the competing records, transformation, confidence, time, and clinical context needed to judge whether it is appropriate for a particular use.

CMS API version advancement needs endpoint-by-endpoint compatibility evidence

CMS lists standards and implementation-guide versions for Patient Access, Provider Access, Payer-to-Payer, Provider Directory, and Prior Authorization APIs and describes conditions for using updated versions. Version advancement can reduce technical stasis, but each payer still needs evidence that the chosen endpoint contract, data, authorization, clients, and transition preserve required access.

A NextGen Mirth channel retry needs duplicate-control and acknowledgment lineage

NextGen presents Mirth Connect as an integration engine for routing, transforming, mapping, and exchanging healthcare data across disparate systems. Retrying a failed channel can restore delivery, but it can also duplicate a message or repeat a downstream action unless source identity, attempts, acknowledgments, and receiver reconciliation stay connected.

An eHealth Exchange query needs permitted-purpose and responder-scope evidence

eHealth Exchange operates a nationwide health-information network and is a Designated QHIN under TEFCA, with official materials describing query, document exchange, public-health, federal, and other services. A successful query can prove that a request traveled and produced a response, but it does not by itself establish that the purpose, patient match, responders, data classes, and resulting use were appropriate and complete.

A Redox routing decision is not clinical document reconciliation

Redox presents healthcare data connectivity, normalization, and automated document triage and routing. Delivering a document to a likely destination can reduce queues, but it does not prove patient identity, encounter fit, document completeness, clinical interpretation, filing, acknowledgment, or reconciliation by the accountable care team.

Health Language mappings need source codes and version history

Wolters Kluwer presents Health Language for managing evolving terminologies, normalizing health data, and supporting interoperability and data quality. A standardized target can improve exchange and analytics, but the original code, terminology editions, mapping rule, ambiguity, and authorized use must remain visible.

A Bamboo Health event alert needs a separate care-action record

Bamboo Health describes real-time notifications when patients experience care events, alongside patient-history, discharge, and transition products. The alert can create timely awareness, but it does not show that the right person received it, assessed its meaning, acted, reached the patient, or completed a safe transition.

HealthShare record deduplication should keep clinical disagreement visible

InterSystems describes HealthShare Unified Care Record as an aggregated, normalized, and deduplicated patient record built from multiple sources. That architecture can reduce fragmentation while still preserving conflicting assertions, source context, and the authority required to reconcile them.

CommonWell pairs a master person index with record location—but retrieval is not identity proof

CommonWell's official site presents a nationwide exchange platform with a Master Person Index, Record Locator Service, Data Broker, and Trust Network. Those services can support discovery and retrieval across connected organizations, but a returned document does not by itself prove that every identity attribute is correct, the record belongs to the intended person, or the data is fit for a clinical decision.

Epic offers record exchange, patient-directed APIs, and partner access—but those routes are not interchangeable

Epic's interoperability page describes Care Everywhere record exchange, FHIR-based patient-directed APIs, Community Link access, government connections, health-plan data, referrals, Share Everywhere, and public interface specifications. Each route serves a different actor and purpose, so buyers need route-specific authority, payload, identity, workflow, and acceptance tests.

Firely Server provides FHIR infrastructure—but a running endpoint is not conformance

Firely presents server, API, validation, and conformance tooling for FHIR implementations. An endpoint can accept and return resources while still missing required profiles, terminology, search behavior, authorization, provenance, or production workflow semantics.

Verato identity resolution links records—it does not normalize clinical meaning

Verato presents identity resolution as a way to connect people, organizations, and networks across systems. That identity layer can help decide which records belong together without establishing that local codes, units, document context, provenance, or clinical meaning are equivalent.

Google Cloud Healthcare API keeps FHIR, HL7v2, and DICOM as separate stores

Google Cloud's official overview places FHIR, HL7v2, and DICOM data in modality-specific stores with distinct APIs. One managed service can centralize operations without making the formats, meanings, consent rules, or clinical workflows interchangeable.

FHIR R4 defines an interoperability base—not an implementation guide

HL7's permanent R4 publication defines resources, formats, APIs, terminology, and conformance infrastructure. A production exchange still needs the applicable profiles, implementation guide, versions, partner agreement, security, and tested behavior.

HTI-4 puts electronic prior authorization in certified health IT—not clinical decision authority

ASTP/ONC's HTI-4 final rule adds and updates health IT certification criteria for electronic prior authorization alongside electronic prescribing, real-time prescription benefit, and related APIs. Certification evidence addresses defined technology capabilities; it does not make the software the clinical or coverage decision-maker.

HTI-1 algorithm transparency targets certified health IT—not model approval

ONC's HTI-1 rule creates transparency requirements for AI and other predictive algorithms that are part of certified health IT. The disclosure baseline supports user assessment; it is not a federal approval of a model or a local decision to use it.

The Direct Standard secures transport—not disclosure authority

DirectTrust's Version 1.3 standard profiles secure, authenticated push messaging to known recipients. Delivery does not establish authorization, semantic completeness, reconciliation, or clinical use.

USCDI v6 expands device identity beyond implantables

The published data set broadens Unique Device Identifier from implantable devices to medical devices generally, creating a wider exchange target without proving capture, mapping, or clinical use.

TEFCA entry can run through a QHIN, Participant, or Subparticipant

The Recognized Coordinating Entity describes a network-of-networks hierarchy in which organizations may connect directly to a QHIN or use a Participant or Subparticipant path, with contracts and roles preserved at each layer.

US Core keeps Must Support separate from data availability

In US Core 9.0.0, Must Support sets implementation capability for responders and requestors; it does not promise that every marked element will be populated in every resource or clinically complete.

FHIR R5 is a release—not a production migration verdict

The current published specification gives architects a version to assess, but adoption still depends on implementation-guide dependencies, partner support, artifact maturity, and conformance evidence.

PDex 2.1 makes payer data exchange a provenance test

HL7's current PDex guide maps payer clinical, claims, encounter, and prior-authorization data into FHIR exchange. Trust depends on preserving source mappings, versions, provenance, and reconciliation.

FHIR Bulk Data 3.0 turns export into an asynchronous job

HL7's current published guide separates export kickoff, status polling, completion manifest, files, and errors. A working endpoint is only the start; buyers need the whole job and its authorization boundary.