ONC Certification
Medplum is ONC Certified. Below are certification resources and documentation.
Mandatory Disclosures
Item | Description |
---|---|
Developer Organization Name | Medplum |
Date the product was certified | 07/31/2024 |
Product Name and Version | Medplum, 3 |
Unique Certification Number | 15.04.04.3147.Medp.03.01.1.240731 |
Certification Criteria | Criteria link |
Pricing | Offering Grid |
Registration Process | Instructions |
This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services.
Standards Version Advancement Process Notices
Notice of Intent to Implement HL7 FHIR US Core Implementation Guide STU 5.0.1 for 170.315(g)(10)
- Issued 03/07/2023
Please be advised that Medplum has opted to leverage ONC's SVAP process for the certification criteria at 170.315(g)(10) to adopt the HL7 FHIR US Core Implementation Guide STU 5.0.1 in its Patient and Population API Services. The adoption of the updated version will provide better forward compatibility and longevity for the APIs certified to this criterion. Because Medplum is adopting this version in its initial certification of to the (g)(10) criterion, it is expected that the adoption of the updated version will have no impact on the interoperability of the affected module.
Criteria Certified
This is the list of certified criteria. Related to this criteria these scripts are for the Medplum team only.
Criteria | Description |
---|---|
a2 | CPOE - Laboratory |
a5 | Demographics |
a14 | Implantable Device List |
b10 | Electronic Health Information Export (Cures Update) |
d1 | Authentication, Access Control, Authorization |
d2 | Auditable Events and Tamper Resistance |
d3 | Audit report |
d4 | Amendmments |
d5 | Automatic access timeout |
d6 | Emergency Access |
d7 | End-User Device Encryption |
d9 | Trusted connection |
d12 | Encrypt Authentication Credentials |
d13 | Multi-factor Authentication |
g3 | Safety Enhanced Design |
g4 | Quality Management System |
g5 | Accessibility-Centered Design |
g10 | Standardized API for Patient and Population Services |
The following criteria are required for CHPL listing: d12, d13, g4, g5.
Materials and Usage
Resource Name | Description | Access |
---|---|---|
Compliance Certificate | Medplum Compliance Certificate | Request Access |
Checklist | Checklist for certification | Request Access |
Decision Guide | Decision framework for which certification to pursue | Request Access |
ONC 2015E Cures Base EHR | Requirements for a basic EHR per Cures Act | HealthIT.gov |
CMS-specific CEHRT | Certification for CMS reimbursement | CMS.gov |
CMS Queries | CMS reportable metrics | Request Access |
EHR Definition | Description of what defines an EHR | www.ecfr.gov |
Real World Testing
Download Real World Testing Plan 2024 Download Real World Testing Plan 2025