FHIR API Integration Services

FHIR stands for Fast Healthcare Interoperability Resources. It is a healthcare data standard created by HL7 International that defines how clinical information — patient demographics, lab results, medications, diagnoses, and more — is structured and exchanged between healthcare systems using modern web APIs. The "Fast" refers to its design for quick implementation using familiar web technologies (REST, JSON, OAuth 2.0), in contrast to older healthcare standards like HL7 v2 and C-CDA that require specialized infrastructure. FHIR R4 is the current normative release and the version required by the 21st Century Cures Act and CMS interoperability regulations.

FHIR (Fast Healthcare Interoperability Resources) is a modern healthcare data standard developed by HL7 International that defines how clinical data is structured, queried, and exchanged over RESTful APIs. Unlike older standards such as HL7 v2 that use pipe-delimited messaging over TCP connections, FHIR uses JSON and XML resources transmitted over HTTPS — the same web technologies that power modern applications. FHIR matters because it is the foundation of the 21st Century Cures Act interoperability requirements, the CMS Patient Access and Provider Directory APIs, and the SMART on FHIR app ecosystem. FHIR R4, released in 2019, is the current normative version and the standard that all certified health IT must support.

SMART on FHIR (Substitutable Medical Applications and Reusable Technologies) is an open standard that defines how third-party applications securely launch within an EHR and access clinical data via FHIR APIs. The SMART App Launch framework uses OAuth 2.0 authorization to negotiate data access scopes, resolve the current patient and encounter context, and issue time-limited access tokens. Applications can launch in two modes: EHR launch, where the app is opened from within the EHR with clinical context pre-populated, and standalone launch, where the app initiates the authorization flow directly. SMART on FHIR is supported by Epic, Oracle Health, MEDITECH, and most major EHR platforms, making it the standard mechanism for clinical app integration.

CDS Hooks is an HL7 specification for integrating clinical decision support (CDS) directly into EHR workflows. When a clinician performs a specific action — opening a patient chart, selecting a medication, or signing an order — the EHR fires a "hook" that calls an external CDS service with FHIR-formatted clinical context. The CDS service evaluates the data and returns recommendation cards with suggested actions, informational alerts, or links to SMART on FHIR apps. CDS Hooks supports hook types including patient-view, order-select, order-sign, and encounter-start. Unlike traditional alert systems that generate batch notifications, CDS Hooks delivers real-time, context-aware guidance at the point of care, helping reduce alert fatigue while improving clinical outcomes.

Bulk FHIR (formally the FHIR Bulk Data Access specification) is an asynchronous export mechanism that allows systems to extract large volumes of FHIR data in ndjson (newline-delimited JSON) format. Unlike standard FHIR REST queries that return individual resources or small bundles, Bulk FHIR exports entire populations of data — thousands to millions of records — in a single operation. You should use Bulk FHIR when you need to populate a data warehouse, run population health analytics, generate quality measure reports, or feed machine learning pipelines. Bulk FHIR supports system-level, group-level, and patient-level exports with filtering by resource type and date range.

Use FHIR R4 for any new integration that involves API-based data access, third-party application connectivity, patient-facing portals, mobile applications, or regulatory compliance requirements (CMS Patient Access API, TEFCA QHIN participation). FHIR is purpose-built for RESTful architectures with JSON payloads, OAuth 2.0 security, and fine-grained resource access. HL7 v2 remains the better choice for high-volume, real-time clinical message flows — ADT notifications, lab results, and orders — between systems that already support v2 interfaces over TCP/MLLP. Saga IT helps organizations implement both standards and build migration pathways from HL7 v2 to FHIR where it makes technical and business sense.

A FHIR implementation guide (IG) is a set of rules and constraints that define how FHIR resources should be used for a specific use case or jurisdiction. The base FHIR specification is intentionally broad — an implementation guide narrows it by specifying which resources are required, which elements are mandatory, what terminology codes must be used, and how resources should reference each other. The most important IG in the United States is US Core, which defines the minimum data elements that certified health IT systems must support under USCDI. Other major IGs include Da Vinci (payer interoperability), CARIN Blue Button (patient access), and SMART App Launch (application authorization). Saga IT implements custom and standard IGs with full profile validation using the official FHIR validator.

A typical FHIR API interaction starts with a RESTful GET request to a FHIR server endpoint. For example, GET https://fhir.example.com/R4/Patient?family=Doe&birthdate=1980-01-15 searches for patients by last name and birth date. The server responds with a FHIR Bundle containing matching Patient resources in JSON format. Each Patient resource includes identifiers, name, gender, birth date, address, and other demographic elements conformant to the US Core Patient profile. For write operations, POST https://fhir.example.com/R4/Observation sends a new clinical observation (lab result, vital sign, etc.) to the server. All requests require an OAuth 2.0 Bearer token obtained through the SMART App Launch authorization flow.

FHIR server deployment depends on your scale, cloud environment, and use case. For organizations that need full control, we deploy HAPI FHIR — the most widely used open-source FHIR server — on AWS EC2 or Azure VMs with PostgreSQL as the backing database. For managed cloud options, we configure Azure Health Data Services (formerly Azure API for FHIR), AWS HealthLake, or Google Cloud Healthcare API, which handle server infrastructure, scaling, and FHIR compliance out of the box. Every deployment includes OAuth 2.0 authorization server integration, TLS encryption, HIPAA-compliant audit logging, and US Core profile validation. Saga IT provides Terraform and infrastructure-as-code templates for repeatable FHIR server deployments across environments.