FHIR AU Core-aligned, Privacy Act 1988-aligned API & MCP tools — built to run alongside your existing EHR, not replace it.
Compliance and clinical utility, without asking a clinic to hand over raw patient data to a third party.
Hash-verified API-key auth, Fernet-encrypted secrets, an immutable Postgres audit trigger — not just a policy statement. A patient's record doesn't depend on a clinic trusting a policy PDF.
Aligned to HL7's AU Core Implementation Guide v2.0.0 — so a GP's system and a specialist's system can exchange structured patient data, not another fax.
De-identified and coded audit records for every clinical operation, written to durable storage — not an in-memory list lost on restart.
MCP tool exposure for agents, a REST API for EHR systems — a clinic keeps the system its staff already know.
Every row below runs through one API today (POST /api/v1/capabilities/{capability}/invoke) in a demo-safe simulation tier — zero external partner credentials required, synthetic Australian patient data only. No real clinic has real patient data in this system yet. Turning a simulation into a live vendor integration is a configuration change (credentials), not a rebuild.
Built & real today. Live FHIR Appointment calls against the hosted OpenEMR instance — the only capability below with a working real-vendor tier already.
Demoable now (simulation). A real Infermedica integration is built and credential-gated — flip an env var, no redeploy — pending activation. Gated behind a clinician-approval check before any recommendation can be acted on.
Demoable now (simulation). A real HealthLink secure-messaging integration exists as a stub, pending a business partnership.
Demoable now (simulation). Modeled on the RubiconMD pattern. No real tier yet by design — that requires recruiting a licensed AU specialist network, not writing more software.
Demoable now (simulation), shaped as an Annalise.ai stand-in. A real Annalise.ai integration is a stub pending commercial/TGA verification. Same clinician-approval gate as AI triage.
Demoable now (simulation). A real integration against the AU eRequesting IG (Magentus/Telstra Health rails) exists as a stub, pending that vendor partnership.
Demoable now (simulation) — the real HL7 CDS Hooks order-dispatch request/response contract, with rule-based candidate ranking standing in for CQL. Real CQL execution needs a JVM-based execution service we haven't stood up yet.
The dashboard gives clinical staff a full view into every tool — audit trail included.