?>

The interoperability subscription is becoming a transitional artifact

There’s a category of healthcare IT spend that’s quietly aging out of relevance: the third-party interoperability middleware subscription.

For most of the last decade, this category existed for a clear reason — legacy EHRs didn’t expose structured data through modern APIs. If you wanted to send a clinical document to an outside provider, submit immunization data to a state registry, or integrate a new digital health tool, you didn’t ask the EHR vendor. You bought a separate subscription from a middleware specialist like EMR Direct, paid per connection or per transaction, and accepted that the interoperability layer would live structurally outside the platform you’d already implemented.

The architecture worked. The economics didn’t age well.

Three forces are now converging to make the middleware subscription a transitional cost rather than a permanent line item.

FHIR has moved from emerging to mandated

The CMS Interoperability and Patient Access Final Rule (CMS-9115-F) established FHIR-based API requirements for payers in 2020 and remains the foundation. The CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), published January 2024, builds on it with four new FHIR APIs — Provider Access, Payer-to-Payer, Patient Access enhancements, and Prior Authorization — with operational provisions in effect from January 1, 2026, and full API compliance required by January 1, 2027. The ONC Cures Act Final Rule prohibits information blocking and requires certified health IT to support standardized API access — anchored by the (g)(10) FHIR Standardized API criterion. The HTI-1 Final Rule (January 2024) made USCDI v3 the mandatory baseline for certified health IT as of January 1, 2026, replacing the prior USCDI v1 requirement and more than doubling the number of required data elements. ONC is now publishing through USCDI v6 (July 2025), with draft v7 open for comment. And in December 2025, ONC’s HTI-5 proposed rule proposed removing over 50% of existing certification criteria while explicitly retaining and strengthening the FHIR (g)(10) criterion — described as “the backbone of the programme’s API-first direction.” The direction is settled.

EHR platforms are building FHIR natively, not partnering for it

What used to require a third-party adapter is increasingly an in-platform capability. Native FHIR modules eliminate the data hop, the per-connection fee, the second contract, and the separate audit surface. The integration question is shifting — not “how do we connect external systems?” but “why do we need an external system at all?

The cost structure of middleware subscriptions is hard to defend in budget reviews

When the platform can do natively what the third-party charges for, the renewal conversation gets uncomfortable.

IT leaders who can show a like-for-like replacement — same outcomes, lower recurring cost, fewer vendor relationships — are doing exactly the kind of cost rationalization finance teams reward.

This is the broader market context for what blueBriX has built.

What native FHIR architecture actually changes

The architectural difference between a native FHIR module and a middleware-based interoperability layer comes down to three structural shifts.

The data path is shorter. Clinical data moves from the platform to external systems through the native module, with no third-party gateway translating in the middle. Fewer points of failure, no per-transaction fees to a separate vendor, and a single audit surface for security and compliance reviews.

The contract footprint shrinks. Customers using a native module don’t carry a parallel subscription for interoperability. The capability is part of the platform license. For blueBriX customers specifically, this has meant fully eliminating the EMR Direct subscription, with a measured 20% reduction in licensing and operational costs for the interoperability package — a recurring line that finance teams can audit against prior-year spend.

The roadmap is unified. Capability additions — new FHIR resources, new operations, new exchange partners, compliance updates — move on the same release cycle as the rest of the platform. There’s no waiting for a third-party vendor to prioritize one customer’s use case against their other accounts.

These aren’t speculative benefits. They’re the operational consequences of removing a layer from the architecture.

“The integration question is shifting — not ‘how do we connect external systems?’ but ‘why do we need an external system at all?

What's actually inside the blueBriX FHIR module

The module is FHIR-conformant and built on FHIR R5, the most recent published version of the HL7 FHIR specification. It supports 24 widely used FHIR resource types that cover the core clinical data model:

  1. AllergyIntolerance
  2. CarePlan
  3. CareTeam
  4. Condition
  5. Device
  6. DeviceUsage
  7. DiagnosticReport
  8. DocumentReference
  9. Encounter
  10. FamilyMemberHistory
  11. Goal
  12. Group
  13. Immunization
  14. Location
  15. Medication
  16. MedicationRequest
  17. MedicationStatement
  18. Observation
  19. Organization
  20. Patient
  21. Practitioner
  22. PractitionerRole
  23. Procedure
  24. Provenance

These cover patient demographics, clinical observations, conditions, medications, allergies, immunizations, procedures, care team composition, care plans, device data, family history, medication statements, and document references for unstructured content — the data classes that show up in nearly every interoperability workflow IT teams build against.

On operations, the module supports:

  • Read operations across all 24 resources, for single-patient data retrieval — the standard pattern for clinical lookup and individual record exchange.
  • Bulk Data Access ($export) across all 24 resources, for population-level data movement — the standard pattern for quality reporting, payer data exchange, ACO reconciliation, research extracts, and audit responses.

Together, these access patterns cover the majority of real-world FHIR workflows in US healthcare. A FHIR module without bulk export support forces IT teams into overnight database extracts and custom ETL pipelines for everything at scale, which is how technical debt accumulates in interoperability projects.

Public health reporting that's already live in production

Vendor claims about FHIR conformance are common. Live, automated submission to named state receiving systems is rare — and it’s the most operationally meaningful proof point because production systems enforce conformance in ways internal QA never will.

blueBriX’s FHIR module is in production with direct, automated immunization reporting to three state immunization information systems (IIS):

  • Immunet (Florida’s statewide immunization registry)
  • Florida SHOTS
  • CAIR (California Immunization Registry)

The exchange uses the Immunization FHIR resource as the structured payload. Submission and acknowledgment workflows are automated inside the platform.

For organizations operating across multiple states — community health centers, multi-site provider groups, behavioral health organizations dispensing vaccines — this collapses what was previously a state-by-state integration project into a configurable workflow.

It’s worth being precise about scope: this is public health reporting to state immunization registries, not QHIN participation or TEFCA membership. Those are separate federal frameworks operating at the nationwide network layer. The distinction matters because any vendor claiming “seamless interoperability across the US healthcare network” is overstating what FHIR alone can do. What blueBriX delivers today is specific, defensible, and operationally valuable: live FHIR-based reporting to named state IIS systems through standards-based exchange.

How blueBriX handles the legacy exchange reality

There’s a tradeoff in the architecture worth surfacing for IT buyers evaluating native FHIR platforms.

The blueBriX FHIR module is R5-only. R5 is the most recent published version of FHIR, positioning the platform for where US interoperability policy is heading. But the operational reality of US healthcare in 2026 is that most exchange partners still run on FHIR R4 (which is what ONC certification under (g)(10), USCDI v3 implementations, CMS-9115-F and CMS-0057-F requirements, and TEFCA all reference today) and that legacy HL7 v2 and C-CDA continue to move the majority of operational healthcare data.

The way this works inside blueBriX: the FHIR R5 module handles modern FHIR exchange where partners support R5, while the platform continues to support HL7 v2 and C-CDA natively for everything else.

For an IT leader mapping this against existing exchange partners:

  • Lab results, ADT feeds, and order flows continue through HL7 v2 — still the dominant format for these workflows across US healthcare regardless of FHIR adoption status.
  • Transitions of care documents, referrals, and document-based exchange continue through C-CDA, which remains the operational standard for these use cases.
  • FHIR-based exchange happens through the R5 module where partners support R5.

This hybrid pattern is the operational reality in 2026 — modern FHIR coexisting with established HL7 v2 workflows, not replacing them overnight. The strategic position is that R5 is the direction of travel, and the platform is built for it. The tactical position is that legacy format support means current exchange partners — including R4-using ones, who almost universally also support HL7 v2 or C-CDA for the same use cases — are already covered.

blueBriX FHIR module

You're already asking these questions. We've turned them into a scoring framework.

Twenty-five vendor evaluation questions across seven dimensions — architecture, standards, production proof, cost structure, regulatory posture, security, and implementation. Each one paired with what a strong answer looks like.

Five questions worth asking in any native FHIR vs. middleware

Vendor pitches sound similar at the category level. The differences show up in the answers to specific architectural questions. These are five worth pressure-testing in any evaluation — whether you’re looking at blueBriX or considering renewing a middleware subscription:

  • Is the FHIR layer native to the platform, or delivered through a third-party partnership?
  • Which FHIR version is supported, and is Bulk Data Access ($export) implemented in addition to Read?
  • Which public health registries, HIEs, or exchange partners are live in production today — not in sandbox, in production?
  • What third-party interoperability subscriptions does the native module replace, and what’s the measured cost impact?
  • How are legacy formats (HL7 v2, C-CDA) handled for partners not on FHIR?

For blueBriX: native to the platform; FHIR R5 with Read and Bulk Data Access; live in production with Immunet, Florida SHOTS, and CAIR; replaces EMR Direct with a measured 20% reduction in licensing and operational cost; HL7 v2 and C-CDA natively supported alongside FHIR.

These five questions are the starting point. A complete evaluation framework — including questions on conformance testing, audit trails, certifications, US Core profile support, security architecture, and roadmap ownership — is available as a downloadable checklist for IT and integration leaders running a formal vendor comparison.

Native FHIR vs. middleware: A vendor evaluation checklist for IT and integration leaders — 25 questions across seven evaluation dimensions, with what a strong answer looks like for each. Download the checklist above.

The window for "we'll get to FHIR eventually" is closing

blueBriX's FHIR module is FHIR-conformant, built on R5, supports 24 resources covering the core clinical data model, and is live in production for public health reporting to Immunet, Florida SHOTS, and CAIR. The platform continues to support HL7 v2 and C-CDA natively for exchange partners still on legacy formats — because hybrid is the operational reality, and a platform that ignores that isn't ready for production. The question worth asking before the next middleware renewal isn't whether your current vendor is doing the job. It's whether the job should still be theirs to do.

Schedule a personalized demo

Audit your current middleware spend with the blueBriX team

If you’re currently running a third-party interoperability subscription, the most useful next step isn’t a generic demo — it’s a structured conversation about your current integration architecture, what your middleware vendor is actually doing for you, and where a native FHIR module would change the cost structure.

The blueBriX team will walk through:

  • Your current FHIR / HL7 v2 / C-CDA exchange footprint
  • The connections your existing middleware is handling
  • Where the 24 supported FHIR resources and Bulk Data Access workflows would replace third-party capability
  • A like-for-like view of recurring cost before and after

Book the architecture audit.

References: 

CMS-9115-F – https://www.cms.gov/…/cms-interoperability-patient-access-final-rule-cms-9115-f

CMS-0057-F – https://www.cms.gov/…/cms-interoperability-and-prior-authorization-final-rule-cms-0057-f

ONC Cures Act Final Rule – https://www.healthit.gov/topic/oncs-cures-act-final-rule

USCDI – https://www.healthit.gov/isp/united-states-core-data-interoperability-uscdi

HTI-1 Final Rule – https://www.federalregister.gov/documents/2024/01/09/2023-28857/…

HTI-5 Proposed Rule – https://www.healthit.gov/topic/laws-regulation-and-policy/hti-5-proposed-rule-fact-sheet

HL7 FHIR R5 spec – https://hl7.org/fhir/R5/

HL7 FHIR R4 spec – https://hl7.org/fhir/R4/

HL7 FHIR (root) – https://hl7.org/fhir/

Bulk Data Access spec – https://hl7.org/fhir/uv/bulkdata/

US Core IG – https://hl7.org/fhir/us/core/

TEFCA – https://www.healthit.gov/topic/interoperability/policy/trusted-exchange-framework-and-common-agreement-tefca

ONC certification (g)(10) – https://www.healthit.gov/topic/certification-ehrs/certification-health-it

ONC Standards / USCDI ISP – https://isp.healthit.gov/united-states-core-data-interoperability-uscdi

 

FHIR

About the author

Shahzad Mohammad

Shahzad Mohammad is Co-founder and Chief Product Officer at blueBriX, where he has played a central role in shaping the platform from day one. He helped turn a vision for accessible, customizable digital health tools into reality. Passionate about reducing complexity and empowering care teams, Shahzad focuses on building technology that improves patient outcomes and accelerates healthcare innovation.

Frequently asked questions

FHIR (Fast Healthcare Interoperability Resources) is a standard published by HL7 for exchanging healthcare information electronically. It uses modern web technologies — RESTful APIs, JSON, XML — to define structured “resources” like Patient, Observation, and Medication that systems can exchange in a predictable, machine-readable format. FHIR has become the dominant standard because US federal regulation (the ONC Cures Act Final Rule, CMS-9115-F, and CMS-0057-F) references it directly, and because it’s significantly easier to implement than older standards like HL7 v2 and C-CDA.

Native FHIR means the platform exposes FHIR resources and operations directly from its own infrastructure — no third-party translation layer. FHIR middleware (or a “FHIR facade”) sits between a legacy EHR and external systems, translating proprietary or non-FHIR data into FHIR format on the way out. Middleware made sense when legacy EHRs couldn’t speak FHIR natively. As more platforms build FHIR-native architectures, the middleware subscription becomes redundant for those customers.

FHIR R4, published in 2019, is the version referenced by current US federal regulations including ONC certification (g)(10), USCDI v3, and TEFCA. FHIR R5, published in 2023, is the most recent version, with refinements to existing resources and additions to support newer use cases. The US market today runs predominantly on R4, with R5 adoption growing as platforms position for the next regulatory cycle.

Not in the short term. HL7 v2 still moves the majority of lab results, ADT (admission, discharge, transfer) messages, and order flows in US healthcare. C-CDA remains the dominant format for transitions of care documents and referrals. FHIR is the modern direction of travel, but production interoperability strategy needs to handle all three formats for the foreseeable future — a hybrid approach is the 2026 operational reality.

No, and the distinction matters during vendor evaluation. FHIR is a data format standard. TEFCA (the Trusted Exchange Framework and Common Agreement) is the federal framework for nationwide health information exchange, and QHINs (Qualified Health Information Networks) are the network operators participating in TEFCA. A platform can be FHIR-conformant without being a TEFCA participant — they solve different layers of the interoperability problem.

Bulk Data Access is a FHIR specification that defines how systems export large datasets — all patients in a population, all encounters in a date range — in a structured way. It matters because most interoperability use cases at scale (quality reporting, payer data exchange, ACO reconciliation, audit responses) require moving data about many patients at once, not one at a time. A FHIR module without bulk export support forces IT teams into workarounds like overnight database extracts or custom ETL pipelines.

CMS-9115-F (2020) is the original CMS Interoperability and Patient Access Final Rule, establishing FHIR-based Patient Access API requirements for payers. CMS-0057-F (2024) builds on it, adding four new FHIR APIs — Provider Access, Payer-to-Payer, Patient Access enhancements, and Prior Authorization. Operational provisions under CMS-0057-F took effect January 1, 2026; full API compliance is required by January 1, 2027.

USCDI v3 became the mandatory baseline for certified health IT as of January 1, 2026 — superseding the prior USCDI v1 requirement and more than doubling the required data elements. When evaluating a FHIR module, verifying that its supported resources cover the USCDI v3 data classes is a baseline due diligence step. ONC has continued publishing later versions (v4 through v6, with draft v7 open for comment as of January 2026); v3 is the current mandatory floor.

The blueBriX FHIR module is built on FHIR R5. The module does not currently provide R4 backward compatibility, but blueBriX continues to support HL7 v2 and C-CDA natively for exchange partners using legacy formats.

  1. AllergyIntolerance
  2. CarePlan
  3. CareTeam
  4. Condition
  5. Device
  6. DeviceUsage
  7. DiagnosticReport
  8. DocumentReference
  9. Encounter
  10. FamilyMemberHistory
  11. Goal
  12. Group
  13. Immunization
  14. Location
  15. Medication
  16. MedicationRequest
  17. MedicationStatement
  18. Observation
  19. Organization
  20. Patient
  21. Practitioner
  22. PractitionerRole
  23. Procedure
  24. Provenance

Standard Read operations for single-patient data retrieval, and Bulk Data Access ($export) for population-level data exchange across all 24 supported resources.

The blueBriX FHIR module is FHIR-conformant. For specific certification criteria relevant to your procurement requirements, contact the blueBriX team. 

EMR Direct was previously used as a third-party subscription module for the secure transmission of healthcare data to external entities. The native FHIR module inside blueBriX now performs that function directly, removing the need for the EMR Direct subscription. Customers using the native module have fully eliminated this dependency, resulting in a measured 20% reduction in licensing and operational costs for the interoperability package.

Live, automated FHIR-based reporting is in production to Immunet (Florida), Florida SHOTS, and CAIR (California Immunization Registry). Additional registry integrations are added based on customer geography and demand.

No. blueBriX’s FHIR module today delivers public health reporting to state immunization registries and standards-based data exchange with connected partners. TEFCA participation and QHIN operation are separate frameworks that blueBriX is not currently part of.

Not through the FHIR module itself, which is R5-only. For partners on R4 or older systems, blueBriX’s continued native support for HL7 v2 and C-CDA covers most production exchange needs — since the majority of R4-using partners also support these legacy formats for the same use cases.

The 20% figure reflects the reduction in licensing and operational costs for the interoperability package, measured by the elimination of the EMR Direct subscription and associated operational overhead. The exact dollar impact varies by customer based on prior subscription tier and integration volume.

Implementation involves enabling the native module, configuring the supported resources for the customer’s specific exchange use cases, and decommissioning the EMR Direct subscription. The blueBriX integration team handles the transition, including testing connections to existing exchange partners before cutover. Specific timeline depends on integration volume and registry connections required.

Related articles & blogs

Why HTI-5 could turn your technical debt into a legal liability 

Why HTI-5 could turn your technical debt into a legal liability 

Read blog
The economics of interoperability: how FHIR reduces the cost of care delivery

The economics of interoperability: how FHIR reduces the cost of care delivery

Read blog
A healthcare leader’s guide to modernizing data exchange: FHIR vs. C-CDA

A healthcare leader’s guide to modernizing data exchange: FHIR vs. C-CDA

Read blog