Purpose: Help healthcare organizations and HINs prepare for TEFCA (Trusted Exchange Framework and Common Agreement) participation by unifying technical, operational, and compliance readiness across systems and trading partners. The Edge Gateway acts as the governed connection layer to QHINs, enforcing policies, consent, and transaction integrity.
Core Capabilities
- QHIN Edge Gateway: Implements TEFCA technical specifications for exchange between local networks and designated QHINs (Query, Broadcast, and Message Delivery patterns).
- Compliance Framework: Maps organizational controls to TEFCA Common Agreement (CA) and QHIN Technical Framework (QTF) requirements, including identity proofing, audit, and security obligations.
- Policy Enforcement Point (PEP): Applies consent and minimum-necessary filtering at the network edge for all outbound and inbound traffic.
- Transaction Governance: Normalizes IHE-based transactions (XCA, XCPD, XDS.b) and modern FHIR-based exchanges to ensure cross-framework consistency.
Readiness & Conformance
- Readiness assessment with checklists for Legal, Security, Technical, and Operational categories.
- Automated validation of conformance artifacts (FHIR endpoints, certificate chains, policy bundle alignment).
- Evidence library for TEFCA participation audits and renewals, including CA/QTF mappings.
- Gap analysis with prioritized remediation and risk scoring for leadership visibility.
Monitoring & Evidence
- Real-time monitoring of TEFCA exchanges and edge transactions with success/failure metrics.
- Audit trail aligned to FHIR
AuditEventand IHE ATNA profiles. - Health dashboards showing gateway uptime, latency, and exchange volumes per QHIN connection.
- Exportable proof of compliance for RCE or participant review.
Integration & Architecture
- Integrates with EMRs, HIEs, and Interop Engines (Rhapsody, Cloverleaf, Mirth, IPF) via FHIR and IHE protocols.
- Supports both document-based (XDS, XCA) and FHIR RESTful exchanges.
- Includes optional TEFCA Sandbox environment for partner validation testing.
Value
- Compliance: Ensures readiness and conformance to ONC and RCE-defined TEFCA frameworks.
- Security: Centralizes access control, auditing, and encryption at the edge.
- Governance: Provides traceability for all inter-network data sharing events.
- Operations: Simplifies QHIN onboarding, reduces duplicate interfaces, and lowers risk.
Alignment
- ONC Trusted Exchange Framework and Common Agreement (TEFCA)
- RCE (Sequoia Project) QHIN Technical Framework
- FHIR R4 and IHE ITI (XCA, XCPD, XDS.b, ATNA)