Information blocking prevention, patient data access rights, API transparency, and USCDI support — aligned with ONC Final Rule requirements.
Four pillars of compliance with the 21st Century Cures Act Final Rule.
Policies and technical controls that prevent information blocking practices as defined by 45 CFR Part 171.
Secure, standards-based API giving patients and their authorized representatives access to their health information.
Public documentation of all APIs, usage policies, and developer resources as required by ONC Final Rule.
Transparent disclosure of any fees associated with accessing or exchanging data via our APIs.
United States Core Data for Interoperability — supported data classes.
We invoke the following ONC-recognized exceptions where applicable.
Applied when information blocking would otherwise violate applicable privacy laws or a patient's right to restrict access.
Applied when information exchange would impose an identified security risk that cannot be adequately mitigated.
Applied in limited circumstances where disclosure would likely cause substantial harm to the patient or third party.
Applied when a request cannot be fulfilled due to technical or practical infeasibility despite good faith effort.
Our compliance team can provide documentation and answer questions for your ONC certification process.