Ensuring Trust and Security in FHIR Data Processing
Trust & Security — How Records Handles Your Data - MedVertical
Summary
Records reads data from a FHIR server to record validation results and metadata, supporting system monitoring and governance. It does not store clinical payloads or patient data.
Details
This system (Records) is designed to deploy adjacent to existing FHIR infrastructure as a sidecar, ensuring it never writes, modifies, or deletes data. It uses standard REST APIs with GET/HEAD requests only, performing transient processing for validation. Only resource IDs, validation run metadata, and signal outputs (PASS/WARN/FAIL) are stored; clinical payloads or PHI/PII are never retained. Deployment options include SaaS and On-Premises. In the on-premises setup, credentials remain within the local network. Furthermore, validation occurs asynchronously, ensuring zero latency impact on the FHIR server. The system does not claim to be a medical device; rather, it provides 'evidence' signals for governance teams to make decisions.
Original content copyright by respective publishers