Health data exchange, standards, and infrastructure intelligence
Reporting on nationwide exchange, FHIR implementation, certification policy, identity, consent, terminology, public-health connectivity, and the systems responsible for moving usable health information.
NLM's VSAC is the central authority and repository for official CMS electronic clinical quality measure value sets. CDC's PHIN VADS distributes value sets tied to public-health and HL7 implementation-guide use. Teams should identify the governing program before choosing, versioning, or migrating terminology content.
By Health Interoperability Review Evidence Desk8 min read
Smile Digital Health presents Smile Omni as a shared FHIR-native foundation for data, compliance, quality, clinical logic, automation, and operational workflows. A shared layer can reduce duplication, but it also creates common dependencies: every version, profile, terminology, rule, tenant, interface, and workflow change needs a documented impact population, regression result, exception, approval, and release record.
PointClickCare describes connecting hospitals, health plans, ACOs, HIEs, and post-acute providers to encounter and transition information across care settings. Before a signal opens work, the receiving organization must resolve the patient, source facility, care setting, encounter, longitudinal episode, event correction state, attributed population, and intended recipient.
Availity positions Intelligent Gateway for nationwide payer-provider administrative connectivity across X12 transactions, API modes, and selected FHIR exchange. A connection claim becomes operational evidence only when a buyer can name the trading partners, transaction and version, route, identities, acknowledgements, rejections, retries, reconciliation, and accountable owner.
FHIR R4 says Subscription criteria are evaluated against a resource's new value, so no notification is sent when a resource is deleted or updated so that it no longer matches. A subscriber that maintains a working population needs an explicit reconciliation path for those exits rather than treating received push messages as a complete current set.
Netsmart says CareConnect Inbox supports group and individual task assignment inside Netsmart EHR workflows. A buyer should test the exact custody transition from a shared queue to a named worker, including competing claims, returns, reassignment, service-level clock changes, escalation, closure, and reopening, because a current owner or closed status cannot reconstruct who held responsibility at each step.
Clinical Architecture says PIQXL Gateway uses its PIQI Framework to score exchanged patient information and highlight root causes of data-quality issues. A score can direct investigation, but a receiving organization still has to define the exchange population, the measure, the threshold, the exception owner, and whether a particular record is fit for its intended use.
Kno2’s official Direct Secure Messaging page describes exchange of PDFs, C-CDA documents, HL7 v2 messages, and FHIR JSON resources over a Direct route. That range makes recipient, payload type, patient match, parsing, acknowledgement, and clinical filing separate obligations; secure delivery is not proof that a receiving workflow used the data correctly.
iNTERFACEWARE says it supports both Iguana 6 and the newer IguanaX, plans to evolve them gradually, and does not intend to force disruptive migrations. Continued product support is important evidence, but each production interface still needs its own version, dependency, security, test, change, stay-or-migrate decision, parallel-run result, rollback plan, and operational acceptance.
Qvera says its interface engine's AI Companion can generate mapping scripts, debug errored messages, and troubleshoot connectivity across an engine that supports HL7, FHIR, DICOM, X12, and other formats. Generated code can accelerate integration work, but it remains a proposed transformation until representative messages, versions, semantics, exceptions, privacy controls, and production receipts are validated.
CMS-0057-F requires impacted payers to share specified patient data through a Provider Access API with in-network or enrolled providers who have a treatment relationship, while maintaining attribution and allowing patients to opt out. Endpoint access alone cannot establish that a provider-patient-data relationship is currently permitted.
1upHealth describes a public FHIR R4 formulary API that publishes covered drugs, tiers, restrictions, alternatives, and cost information. A discoverable API response is not an individualized pharmacy claim or a guarantee of current member coverage unless source, plan, drug, effective period, synchronization, restrictions, and uncertainty are retained.
7 minOfficial payer formulary API product analysis
Microsoft says Azure Health Data Services can extract, redact, or replace protected-health-information entities in unstructured text for secondary use. A completed job does not establish that the output is anonymous, permitted for the intended recipient, fit for the analysis, or safe to link with other data.
b.well Connected Health presents a consumer-mediated health-data network and says patient consent is central to some life-sciences workflows. Consent should be a versioned, purpose- and recipient-specific authorization with downstream receipts; a connected record, app session, or earlier approval does not establish that every later acquisition, disclosure, normalization, or use remains authorized.
Health Samurai says Aidbox supports FHIR STU3, R4, R5, and R6, more than 500 implementation guides, custom profiles and terminology, and multitenant access control. Supporting that range does not establish which release, guide, profile, value set, authorization rule, or endpoint governs a particular tenant and exchange.
The Recognized Coordinating Entity distinguishes organizations that completed QHIN onboarding and are designated for TEFCA exchange from candidates still onboarding, and says the rolling list can change. A roster snapshot does not establish the route, relationship, exchange purpose, production status, or time that governed a particular transaction.
Surescripts presents medication-history, e-prescribing, formulary, benefit, and prior-authorization services as distinct parts of its health-information network. A returned history should remain source evidence until a clinician reconciles patient match, prescriptions, fills, cancellations, reversals, timing, adherence uncertainty, and current intent into an active list.
Datavant's official site reports one trillion records tokenized annually. That is a provider-reported processing-volume measure, not by itself a count of unique people, longitudinal coverage, usable matches, authorized exchanges, or records delivered for a defined care, payment, research, or operational purpose.
Infor says Clinical Bridge can process full item loads of more than 50,000 items in minutes, supports near-real-time updates, and carries stock and non-stock item data. Speed does not establish that one complete item epoch became visible. Preserve the source cutoff, expected batch, staged exceptions, commit policy, visibility time, and stock-state transitions in one load record.
The Recognized Coordinating Entity describes the TEFCA Common Agreement as a contract supported by technical infrastructure, governance, and standard operating procedures, with Version 2 adding FHIR-based exchange. Each production exchange still needs the exact agreement, SOP, technical framework, role, purpose, and implementation version that governed it.
AWS describes HealthLake as a managed FHIR persistence layer and says a data-transformation agent can convert legacy clinical documents into queryable FHIR resources. A converted resource still needs source-document identity, field mapping, profile and version, terminology, uncertainty, validation, and receiving-workflow evidence before it can be trusted for use.
Moxe presents secure clinical-data exchange connecting payers and providers and transforming data for payment and operational uses. Buyers still need to reconstruct the request purpose, permitted scope, source selection, transformation, provenance, delivery, acceptance, and downstream use for every exchange.
Microsoft says Azure API for FHIR retires September 30, 2026. The deadline calls for tested migration and rollback evidence—not assumed successor equivalence.
The Office of the Assistant Secretary for Technology Policy describes the Interoperability Standards Advisory as a public reference for identifying and assessing standards and implementation specifications. Inclusion helps planners compare maturity and use cases, but applicability, required version, conformance criteria, and production obligation still come from the controlling program, rule, contract, certification, or exchange agreement.
Health Gorilla presents a pipeline that finds, matches, translates, de-duplicates, reconciles, traces, and delivers multi-source health data. A unified chart can reduce review burden, but a selected value must not erase the competing records, transformation, confidence, time, and clinical context needed to judge whether it is appropriate for a particular use.
CMS lists standards and implementation-guide versions for Patient Access, Provider Access, Payer-to-Payer, Provider Directory, and Prior Authorization APIs and describes conditions for using updated versions. Version advancement can reduce technical stasis, but each payer still needs evidence that the chosen endpoint contract, data, authorization, clients, and transition preserve required access.
NextGen presents Mirth Connect as an integration engine for routing, transforming, mapping, and exchanging healthcare data across disparate systems. Retrying a failed channel can restore delivery, but it can also duplicate a message or repeat a downstream action unless source identity, attempts, acknowledgments, and receiver reconciliation stay connected.
eHealth Exchange operates a nationwide health-information network and is a Designated QHIN under TEFCA, with official materials describing query, document exchange, public-health, federal, and other services. A successful query can prove that a request traveled and produced a response, but it does not by itself establish that the purpose, patient match, responders, data classes, and resulting use were appropriate and complete.
Redox presents healthcare data connectivity, normalization, and automated document triage and routing. Delivering a document to a likely destination can reduce queues, but it does not prove patient identity, encounter fit, document completeness, clinical interpretation, filing, acknowledgment, or reconciliation by the accountable care team.
Wolters Kluwer presents Health Language for managing evolving terminologies, normalizing health data, and supporting interoperability and data quality. A standardized target can improve exchange and analytics, but the original code, terminology editions, mapping rule, ambiguity, and authorized use must remain visible.
Bamboo Health describes real-time notifications when patients experience care events, alongside patient-history, discharge, and transition products. The alert can create timely awareness, but it does not show that the right person received it, assessed its meaning, acted, reached the patient, or completed a safe transition.
InterSystems describes HealthShare Unified Care Record as an aggregated, normalized, and deduplicated patient record built from multiple sources. That architecture can reduce fragmentation while still preserving conflicting assertions, source context, and the authority required to reconcile them.
CommonWell's official site presents a nationwide exchange platform with a Master Person Index, Record Locator Service, Data Broker, and Trust Network. Those services can support discovery and retrieval across connected organizations, but a returned document does not by itself prove that every identity attribute is correct, the record belongs to the intended person, or the data is fit for a clinical decision.
Epic's interoperability page describes Care Everywhere record exchange, FHIR-based patient-directed APIs, Community Link access, government connections, health-plan data, referrals, Share Everywhere, and public interface specifications. Each route serves a different actor and purpose, so buyers need route-specific authority, payload, identity, workflow, and acceptance tests.
Rhapsody presents healthcare integration infrastructure spanning data exchange, identity, and terminology. Moving records into an AI workflow can make data available, but it does not prove that codes, identities, context, or clinical meaning remain equivalent across systems.
Firely presents server, API, validation, and conformance tooling for FHIR implementations. An endpoint can accept and return resources while still missing required profiles, terminology, search behavior, authorization, provenance, or production workflow semantics.
Network-based retrieval can return useful clinical records while coverage still depends on permitted purpose, patient matching, participating sources, available data, and query timing.
A common trust framework can govern network participation and exchange, while each disclosure still depends on the permitted purpose, requester, patient, data, law, policy, and technical event.
Verato presents identity resolution as a way to connect people, organizations, and networks across systems. That identity layer can help decide which records belong together without establishing that local codes, units, document context, provenance, or clinical meaning are equivalent.
Google Cloud's official overview places FHIR, HL7v2, and DICOM data in modality-specific stores with distinct APIs. One managed service can centralize operations without making the formats, meanings, consent rules, or clinical workflows interchangeable.
HL7's permanent R4 publication defines resources, formats, APIs, terminology, and conformance infrastructure. A production exchange still needs the applicable profiles, implementation guide, versions, partner agreement, security, and tested behavior.
ASTP/ONC's HTI-4 final rule adds and updates health IT certification criteria for electronic prior authorization alongside electronic prescribing, real-time prescription benefit, and related APIs. Certification evidence addresses defined technology capabilities; it does not make the software the clinical or coverage decision-maker.
ONC's HTI-1 rule creates transparency requirements for AI and other predictive algorithms that are part of certified health IT. The disclosure baseline supports user assessment; it is not a federal approval of a model or a local decision to use it.
The CMS final rule created FHIR-based API duties for specified payers and defined categories of data to make available. The API does not guarantee that every clinical fact exists, is reconciled, or is fit for a particular use.
DirectTrust's Version 1.3 standard profiles secure, authenticated push messaging to known recipients. Delivery does not establish authorization, semantic completeness, reconciliation, or clinical use.
ASTP says exceptions are voluntary, actor knowledge standards differ, and missing an exception does not automatically establish information blocking; API success or failure cannot decide the case alone.
The published data set broadens Unique Device Identifier from implantable devices to medical devices generally, creating a wider exchange target without proving capture, mapping, or clinical use.
The Recognized Coordinating Entity describes a network-of-networks hierarchy in which organizations may connect directly to a QHIN or use a Participant or Subparticipant path, with contracts and roles preserved at each layer.
In US Core 9.0.0, Must Support sets implementation capability for responders and requestors; it does not promise that every marked element will be populated in every resource or clinically complete.
The current published specification gives architects a version to assess, but adoption still depends on implementation-guide dependencies, partner support, artifact maturity, and conformance evidence.
HL7's current PDex guide maps payer clinical, claims, encounter, and prior-authorization data into FHIR exchange. Trust depends on preserving source mappings, versions, provenance, and reconciliation.
HL7's current published guide separates export kickoff, status polling, completion manifest, files, and errors. A working endpoint is only the start; buyers need the whole job and its authorization boundary.
HL7 lists SMART App Launch 2.2 as the current published authorization guide. A FHIR endpoint still needs scoped access, token controls, and operating evidence.
The living guidance adds implementation context for impacted payers preparing Provider Access, Payer-to-Payer, Prior Authorization, and expanded Patient Access APIs.
The national brief shows broad public-health connectivity while documenting the operating services and remaining barriers hidden behind a simple connection count.
The milestone establishes material network activity, while the accompanying oversight actions make participation quality and governance more important than raw volume.
The release keeps document exchange current and underscores why enterprise programs must manage FHIR resources and CDA documents as different artifacts.
The final rule establishes a federal TEFCA regulatory part while leaving unfinalized proposals withdrawn, a distinction current summaries must preserve.
The final rule changes the Privacy and Infeasibility Exceptions and adds a Protecting Care Access Exception, requiring policy and workflow review beyond technical exchange settings.
The current guide provides a sharper reference for consumer-directed claims exchange, while payer obligations and production readiness still require separate verification.
The proposed rule points toward further certification, API, and information-blocking changes, but its provisions cannot be scored as final obligations.
The designation adds another national participation route, but buyers still need to verify exchange purposes, onboarding paths, ecosystem reach, and operating responsibilities.
The framework update makes version control, operating-procedure alignment, and participant impact assessment necessary parts of national-network diligence.