Healthcare IT glossary

FHIR (Fast Healthcare Interoperability Resources)

What is FHIR?

FHIR is a healthcare-data interchange standard published by HL7 International. FHIR R4 is the version most U.S. health systems deploy today; R5 began limited adoption in 2024. FHIR defines clinical, administrative, and financial resources as RESTful API entities, enabling modern, web-friendly data exchange.

Also: FHIR R4, FHIR R5, HL7 FHIR

FHIR is mandated by the 21st Century Cures Act for patient access, USCDI v3 data sharing, and TEFCA QHIN exchange. BytePad implements FHIR R4 for both ingest (legacy-system retirement) and export (downstream analytics, AI retrieval).

What is HL7 v2?

HL7 v2 is the messaging standard that has carried 95% of clinical messages between hospital systems since the 1990s, ADT (admit/discharge/transfer), ORM (orders), ORU (results), and SIU (scheduling). Still the dominant real-time integration format inside hospitals.

Also: HL7 2.x, pipe-and-hat

Most legacy EHR retirement programs require HL7 v2 ingest plus translation to FHIR R4 for downstream consumers. BIIG (BytePad Integration & Interoperability Gateway) handles both.

What is USCDI v3?

USCDI v3 is the federally mandated dataset of clinical data classes and elements every U.S. EHR must be able to share via FHIR APIs under the 21st Century Cures Act information-blocking rule. Published by ONC; required for ONC-certified EHRs.

Also: United States Core Data for Interoperability

What is TEFCA?

TEFCA is the U.S. federal framework for nationwide health information exchange, administered by the Sequoia Project on behalf of ONC. It governs how Qualified Health Information Networks (QHINs) exchange data across the country.

Also: Trusted Exchange Framework and Common Agreement

QHIN (Qualified Health Information Network)

What is QHIN?

A QHIN is a TEFCA-designated network operator authorized to exchange clinical and administrative data nationwide. As of 2026, designated QHINs include eHealth Exchange, Health Gorilla, Epic Nexus, MedAllies, KONZA, CommonWell, and others.

What is C-CDA?

C-CDA is the XML-based clinical-document format defined by HL7 for structured summary documents, Continuity of Care Document (CCD), Discharge Summary, Progress Note, and more. Required by ONC certification.

Also: CCDA, Consolidated Clinical Document Architecture

X12 837 Claims

What is X12 837?

X12 837 is the HIPAA-mandated electronic claims transaction format, 837P (Professional) for physician services, 837I (Institutional) for hospital services. Defined by the ASC X12 standards body.

Also: 837P, 837I

IHE XDS / XDR

What is IHE XDS/XDR?

IHE XDS (Cross-Enterprise Document Sharing) and XDR (Cross-Enterprise Document Reliable Interchange) are the IHE profiles for sharing clinical documents across organizational boundaries, the historical foundation for health information exchanges and a continuing pattern in federal deployments.

Also: Integrating the Healthcare Enterprise XDS

What is Epic Hyperdrive?

Hyperdrive is Epic's replacement for the legacy Hyperspace client. It is a Chromium-based desktop application that brings Epic's clinical workflows into a modern, web-rendered runtime. Most Epic shops have either deployed Hyperdrive or are in active cutover.

What is Epic MyChart?

MyChart is Epic's patient portal, web and mobile clients that give patients access to their clinical records, messaging, scheduling, billing, and health-maintenance reminders. Mandatory for any Epic-shop patient-experience program.

What is Epic Bridges?

Bridges is Epic's integration engine, the HL7 v2, FHIR, and X12 interface platform that connects Epic to laboratory, radiology, pharmacy, EDI, and other systems.

What is Oracle Health (Cerner) Millennium?

Oracle Health Millennium is the flagship EHR formerly known as Cerner Millennium. Components include PowerChart (clinical), FirstNet (ED), SurgiNet (OR), and Bedrock (configuration). Deployed across many U.S. health systems and the basis of the VA EHRM and DHA MHS GENESIS programs.

Also: Cerner Millennium, PowerChart

What is Meditech Expanse?

Expanse is Meditech's modern, web-based EHR, the successor to Meditech 6.x and Meditech Magic. Used by community hospitals, critical-access facilities, and some larger IDNs.

What is Meditech Magic?

Magic is Meditech's legacy MUMPS-based EHR, predominantly deployed in community and critical-access hospitals during the 1990s and 2000s. End-of-support; commonly retired into archival platforms like BytePad.

What are Workday HCM, Financials and Supply Chain?

Workday provides HCM, Financials, Supply Chain, and Adaptive Planning modules used by U.S. health systems for human capital, ERP, and procurement workloads, often deployed alongside Epic and Cerner.

What is HITRUST r2 / CSF v11?

HITRUST r2 is the highest assurance certification level under the HITRUST Common Security Framework (CSF), currently at version v11. Required by many U.S. health-system business associate agreements. InterScripts and BytePad are HITRUST r2 certified.

What is SOC 2 Type II?

SOC 2 Type II is an AICPA attestation reporting on a service organization's controls over Security, Availability, Confidentiality, Processing Integrity, and Privacy, measured over a period (typically 6–12 months). InterScripts maintains an active SOC 2 Type II attestation.

What is ISO 27001:2022?

ISO 27001:2022 is the international standard for information security management systems (ISMS). InterScripts is ISO 27001:2022 certified, alongside ISO 9001:2015 for quality management.

What are the HIPAA Privacy and Security Rules?

The Health Insurance Portability and Accountability Act (HIPAA) governs the privacy (Privacy Rule) and security (Security Rule) of Protected Health Information (PHI). The Security Rule's Administrative, Physical, and Technical Safeguards map to NIST SP 800-66.

What is CMMC Level 2?

CMMC Level 2 is the Cybersecurity Maturity Model Certification level required of Department of Defense contractors handling Controlled Unclassified Information (CUI). Maps to NIST SP 800-171 controls.

Also: Cybersecurity Maturity Model Certification

What is FedRAMP?

FedRAMP is the U.S. federal program that standardizes security assessment, authorization, and continuous monitoring for cloud products and services. Tiers: Low, Moderate, High. Required for most federal SaaS deployments.

Also: Federal Risk and Authorization Management Program

What is NIST SP 800-53?

NIST Special Publication 800-53 (Rev 5) is the federal catalog of security and privacy controls for U.S. information systems. Foundation for federal RMF, FedRAMP, and CMMC.

What is DoD RMF?

The DoD Risk Management Framework (RMF) is the Department of Defense's adoption of the NIST RMF (SP 800-37) for authorizing and continuously monitoring information systems on DoD networks.

Also: Risk Management Framework

What is Zero Trust Architecture?

Zero Trust is the architecture defined by NIST SP 800-207 and the DoD Zero Trust Reference Architecture, never trust, always verify across identity, device, network, application, data, and visibility pillars.

Also: ZTA, NIST SP 800-207

What is 42 CFR Part 2?

42 CFR Part 2 is the federal regulation governing the confidentiality of substance-use disorder (SUD) treatment records. Adds stricter consent and disclosure rules than HIPAA. Required handling for behavioral-health archival programs.

What is VAULTIS?

VAULTIS is the U.S. Department of Defense data strategy framework: Visible, Accessible, Understandable, Linked, Trustworthy, Interoperable, Secure. It is the reference architecture for federal data-governance programs, including BytePad for Government.

What is VA EHRM?

The Department of Veterans Affairs Electronic Health Record Modernization (VA EHRM) program is replacing the VistA legacy EHR with Oracle Health (Cerner) Millennium across Veterans Health Administration facilities.

Also: VA Electronic Health Record Modernization

What is MHS GENESIS?

MHS GENESIS is the U.S. Military Health System electronic health record, deployed by the Defense Health Agency (DHA) on Oracle Health (Cerner) Millennium. Replacing legacy AHLTA, CHCS, and Essentris systems across the Military Health System.

Also: Military Health System EHR

What is AHLTA?

AHLTA was the U.S. Department of Defense ambulatory EHR replaced by MHS GENESIS. Long-tail archival, FOIA, and chain-of-custody requirements remain after retirement.

Also: Armed Forces Health Longitudinal Technology Application

What is VistA?

VistA is the U.S. Department of Veterans Affairs legacy EHR, in production for 40+ years and being replaced under the VA EHRM program by Oracle Health (Cerner) Millennium. VistA data archival is a frequent BytePad federal use case.

Also: Veterans Health Information Systems and Technology Architecture

GSA Schedule (MAS)

What is the GSA Schedule (MAS)?

The GSA Multiple Award Schedule (MAS) is the U.S. General Services Administration's long-term, government-wide contract vehicle used by federal buyers to procure commercial products and services. InterScripts is a GSA MAS holder.

Also: Multiple Award Schedule

What is defensible disposition?

Defensible disposition is the audited, policy-aligned deletion of records that have passed their retention period. It requires a documented retention schedule, an immutable archive up to the cut-off date, and a tamper-evident audit log of every disposition decision, capabilities BytePad provides out of the box.

ROI (Release of Information)

What is Release of Information (ROI)?

Release of Information is the regulated process by which patient records are disclosed to authorized requestors, patients, attorneys, insurers, government agencies. Workflows must capture consent, scope, audit, and timeliness, and align to HIPAA Privacy Rule.

FOIA / Public Records

What is FOIA?

The Freedom of Information Act (FOIA) and state public-records laws govern disclosure of records held by federal and state agencies. FOIA-ready archival is a common requirement for federal customers using BytePad for Government.

Also: Freedom of Information Act

What is pediatric record retention?

Pediatric medical-record retention is set at the state level. Most states require retention until the age of majority plus a set period (roughly 1 to 7 years in commonly cited hospital rules), often longer than adult retention. State-by-state mapping is part of every BytePad implementation playbook.

What is BytePad?

BytePad is the AI-native intelligent data archival and document management platform from InterScripts, reviewed by KLAS in the February 2026 Emerging Company Spotlight. Securely manages structured and unstructured records across healthcare, government, education, finance, and supply chains.

BIIG (BytePad Integration & Interoperability Gateway)

What is BIIG?

BIIG is the integration spine inside BytePad that connects legacy and modern systems through HL7 v2, FHIR R4, C-CDA, REST, IHE XDS/XDR, X12, Kafka, NiFi, Airflow, and dbt, real-time and batch ingestion on one gateway.

AI Global Search (BytePad)

What is BytePad AI Global Search?

AI Global Search is BytePad's semantic and natural-language retrieval layer across structured and unstructured records. Powered by domain-tuned embeddings and a federated metadata graph.

What is CHAI?

The Coalition for Health AI (CHAI) is a multi-stakeholder body developing responsible AI principles for U.S. healthcare. Published the CHAI Assurance Standards Guide; informs hospital AI governance programs.

Also: Coalition for Health AI

RAG (Retrieval-Augmented Generation)

What is RAG?

Retrieval-Augmented Generation is the AI pattern where a language model retrieves grounded evidence from a knowledge base before generating an answer. BytePad's AI Global Search is a RAG layer over the archived clinical and administrative corpus.