TEFCA Integration
TEFCA connectivity and Qualified Health Information Network onboarding.
Explore TEFCA IntegrationDesign, deploy, and optimize health information exchange integrations — connecting providers, payers, and public health agencies through TEFCA, eHealth Exchange, and regional HIE networks.
An HIE is a layered system — applications query through APIs that depend on trust contracts that ride on networks that speak standards. We design and operate every layer.
Saga IT designs, deploys, and operates health information exchange infrastructure — from regional HIE networks and provider onboarding to real-time clinical data exchange. We connect hospitals, clinics, labs, and public health agencies through standards-based HL7 interfaces and FHIR APIs, enabling seamless care coordination across organizational boundaries.
Health information exchanges enable the electronic sharing of clinical data between healthcare organizations, improving care coordination and reducing redundant testing.
A health information exchange (HIE) is both a noun and a verb. As infrastructure, an HIE is a network that connects hospitals, clinics, laboratories, pharmacies, payers, and public health agencies so they can share patient records electronically. As a process, health data exchange is the act of transmitting clinical information — lab results, discharge summaries, imaging reports, medication histories — between disparate electronic health record (EHR) systems in real time.
HIEs operate at three levels. Community HIEs serve a local market such as a metropolitan area or health system network. State HIEs aggregate data across an entire state, often mandated by legislation and funded through ONC grants. National networks — including eHealth Exchange, CommonWell Health Alliance, Carequality, and Epic Care Everywhere — connect participants coast to coast, enabling cross-organizational queries regardless of geography or EHR vendor.
The passage of the 21st Century Cures Act and the launch of the Trusted Exchange Framework and Common Agreement (TEFCA) by ONC have accelerated the push toward universal health data exchange. TEFCA establishes a single on-ramp to national interoperability through Qualified Health Information Networks (QHINs), replacing the patchwork of point-to-point connections that previously defined HIE connectivity. For healthcare organizations, this means connecting to one QHIN provides access to every other QHIN participant on the network.
Saga IT has designed and deployed HIE infrastructure for regional networks, health systems, and state agencies. Our implementation methodology covers the full lifecycle — from readiness assessment and QHIN selection through interface development, certification, and production go-live. Whether you are building a new community HIE, connecting an existing network to TEFCA, or onboarding participants to a state exchange, our team brings deep expertise in the standards, governance, and technical architecture that underpin modern health information exchange.
Health information exchanges connect participants through standardized interfaces and national networks.
EHR systems publish ADT events, C-CDAs, and lab results to the exchange
Central index resolves patient identity via MPI and applies consent policies
National network routes queries across qualified health information networks
Clinicians, payers, and public health agencies receive matching records
Choosing the right architecture model is the most consequential decision in any HIE implementation.
A central repository stores a master copy of all clinical documents. Participants publish data to the hub, and queries are resolved locally. This model simplifies patient matching and offers the fastest query response times, but requires significant storage infrastructure and robust data governance policies. State HIEs and large regional exchanges often use this approach.
No central data store exists. When a clinician queries the HIE, the request fans out to each participating organization in real time. Data stays at the source until requested, reducing storage and governance burden. Federated models depend heavily on network reliability and can experience slower response times with large participant populations. Carequality and eHealth Exchange use federated query patterns.
Combines centralized indexing with federated document retrieval. A master patient index (MPI) and document registry live in the hub, while clinical documents remain at the source. Queries hit the central index first, then retrieve documents from the originating system. This model balances performance with data sovereignty and is the most common architecture for modern HIE implementations.
TEFCA has designated 11 QHINs to serve as on-ramps to the national health information network. Here's how the major networks compare.
| Feature | eHealth Exchange | CommonWell | Carequality | Epic Nexus | KONZA |
|---|---|---|---|---|---|
| Network Size | 300M+ patients | 187M+ patients | 70%+ US providers | 300M+ records | Regional |
| Primary Use Case | Cross-org query | Record linking | Framework queries | Epic-to-Epic + cross-vendor | Rural/community |
| TEFCA Designation | |||||
| FHIR Support | Planned | ||||
| Document Exchange | C-CDA, XCA | C-CDA, XDS.b | C-CDA, IHE profiles | C-CDA, FHIR | C-CDA |
| Patient Matching | National MPI | CommonWell MPI | Implementer MPI | Epic MPI | KONZA MPI |
| Organization Type | Non-profit | Non-profit | Framework (Carequality) | Vendor (Epic) | Non-profit |
The six TEFCA exchange purposes that govern how health data flows across QHINs — each with its own consent model, identity requirements, and IHE profile support.
The most-supported TEFCA exchange purpose. Clinicians query and retrieve clinical records on patients under their active care across organizational boundaries — no point-to-point agreement, no faxing required. Used for transitions of care, ED visits, specialist referrals, and shared longitudinal record review.
Payers query providers (and other payers) for clinical evidence supporting claims, prior authorization decisions, and risk adjustment. The Payment purpose is the bridge between TEFCA and CMS-0057-F prior auth workflows, letting payers pull encounter notes, lab results, and imaging without fax workflows.
Population-scale data exchange for HEDIS measures, quality reporting (eCQM), care gap closure, and member outreach campaigns. Healthcare Operations supports payer-led care management programs and provider quality improvement workflows that need access to records across the patient's full provider network.
TEFCA-mediated public health reporting to state and federal agencies. The Public Health purpose covers electronic case reporting (eCR), syndromic surveillance feeds to CDC NSSP, immunization registry submissions, and reportable condition routing across jurisdictional boundaries.
The newest TEFCA exchange purpose, designed for Social Security Disability Insurance, Veterans Affairs, and state Medicaid agencies that need clinical evidence for benefits determination. Currently has limited QHIN support — verify your QHIN supports this purpose before targeting government-benefits use cases.
Members and patients pull their own clinical records from any TEFCA-connected provider through an IAS Provider — typically a patient portal, a third-party app, or a payer-sponsored member experience. Requires NIST IAL2/AAL2 identity proofing, explicit member consent capture, and audit logging at every step.
Full lifecycle health information exchange services — from initial design through ongoing operations and national network connectivity.
Ready to connect your organization to a health information exchange? We handle everything from QHIN selection to production go-live.
Book a ConsultationA typical HIE implementation spans 6-9 months from readiness assessment through production go-live. Here is the phased approach we follow for every engagement.
Evaluate organizational readiness, technical infrastructure, and governance requirements for HIE participation. This phase includes stakeholder interviews, EHR platform assessment, network infrastructure review, and a gap analysis against QHIN onboarding requirements. Deliverables include a readiness scorecard and prioritized remediation plan.
Identify the optimal QHIN pathway based on organizational size, EHR platform, use cases, and regulatory requirements. We evaluate connectivity options across eHealth Exchange, CommonWell, Carequality, and other designated QHINs, comparing onboarding timelines, costs, exchange partner coverage, and technical compatibility with your existing infrastructure.
Design integration architecture including Mirth Connect channels, patient matching configuration, consent management workflows, and security controls. This phase produces interface specifications, data flow diagrams, MPI matching rules, and a security architecture document aligned with TEFCA technical requirements and FAST/UDAP specifications.
Build and test HL7 v2, C-CDA, and FHIR interfaces for document exchange, query/response, and event notification. Development includes Mirth Connect channel configuration, XCA/XCPD profile implementation, document registry and repository setup, and comprehensive unit and integration testing against QHIN sandbox environments.
Complete QHIN onboarding requirements, interoperability testing, and security certification for production connectivity. This phase covers end-to-end testing with QHIN partners, security penetration testing, FAST/UDAP credential provisioning, and formal approval from the QHIN's technical review board.
Launch production HIE connectivity with monitoring, support, and ongoing optimization for data quality and volume. Post-launch activities include transaction monitoring dashboards, patient match rate optimization, document quality scoring, error resolution workflows, and monthly operational reviews.
Modern health information exchanges rely on a layered stack of standards, profiles, and integration engines.
The foundation of every HIE is HL7 v2 messaging for ADT notifications, order entry, and lab results. HL7 v2 messages flow over MLLP (Minimum Lower Layer Protocol) connections and remain the workhorse for high-volume, real-time clinical data exchange between EHR systems and the HIE hub. Our team has built thousands of HL7 v2 interfaces across every major EHR platform.
C-CDA (Consolidated Clinical Document Architecture) provides the document format for clinical summaries, discharge notes, and transitions of care. HIEs exchange C-CDAs using IHE profiles — XDS.b for document sharing within a community, XCA for cross-community queries, and XDR for point-to-point document delivery. These profiles define the transactions, metadata, and security requirements that make document exchange interoperable across vendor boundaries.
FHIR R4 is increasingly the standard for new HIE implementations, particularly for individual access services, payer-to-payer exchange, and SMART on FHIR applications that query HIE data on behalf of clinicians. TEFCA's adoption of the IHE MHD (Mobile Health Documents) profile brings FHIR-based document exchange to the national network, allowing participants to query and retrieve documents using RESTful APIs instead of SOAP-based XCA transactions.
At the interface-engine layer, Mirth Connect — now commercial under NextGen Connect, with the original open-source code continuing as the community-maintained OpenIntegrationEngine fork — is widely deployed for HL7 v2 routing, transformation, and downstream connectivity. Saga IT configures Mirth/NextGen Connect channels for message routing, transformation, patient matching, consent enforcement, and QHIN connectivity. At the HIE hub layer itself, US implementations more commonly run on purpose-built platforms — InterSystems HealthShare, Rhapsody, and Microsoft Azure Health Data Services — with Mirth/NextGen Connect handling participant-edge interfaces feeding into the hub.
Real-world health information exchange implementations — from regional network deployments to automated public health reporting.
Standing up a health information exchange connecting 12 hospitals and 40 clinics across a metropolitan region, enabling real-time clinical data sharing through a centralized HIE platform with community-wide patient matching and consent management.
A health information exchange (HIE) is a network and process that enables the electronic sharing of clinical data between healthcare organizations. HIEs operate at three levels: community HIEs serve local markets like metropolitan areas or health system networks, state HIEs aggregate data across an entire state and are often legislatively mandated, and national networks like eHealth Exchange and CommonWell connect participants across the country. The goal of an HIE is to ensure that clinicians, payers, and public health agencies can access the right patient data at the right time, regardless of which EHR system generated the original record.
TEFCA (Trusted Exchange Framework and Common Agreement) is a national framework established by ONC to create a single, universal policy and technical floor for health data exchange across the United States. Under TEFCA, Qualified Health Information Networks (QHINs) serve as on-ramps to the national network — connecting to one QHIN gives your organization access to every other QHIN participant. TEFCA affects your organization by establishing mandatory technical standards (including FHIR, IHE profiles, and FAST/UDAP security), governance requirements, and permitted exchange purposes that you must implement to participate in the national health information network.
There are three pathways to QHIN connectivity. You can apply to become a QHIN yourself, though this requires significant infrastructure and governance investment and is typically pursued only by large networks. More commonly, organizations connect as a Participant — signing a participation agreement directly with a QHIN and meeting their technical onboarding requirements. The most accessible pathway is Sub-Participant status, where you connect through an existing Participant organization (such as your EHR vendor or a regional HIE). Saga IT helps organizations evaluate which pathway fits their size, use cases, and technical readiness, then manages the onboarding process from application through production connectivity.
eHealth Exchange is the largest operational health information network in the US, connecting over 300 million patient records through a federated query model based on IHE XCA profiles. CommonWell Health Alliance focuses on record linking and document retrieval, with over 187 million patient records and strong EHR vendor participation. Carequality is a framework rather than a network — it establishes technical and policy standards that enable networks to exchange data with each other, and a majority of US providers can be reached through Carequality-enabled connections. eHealth Exchange and CommonWell are designated QHINs under TEFCA; Carequality is not itself a QHIN — it remains a separate trust framework, with cross-traffic to TEFCA reached through QHINs that participate in both. Many organizations connect through multiple networks to maximize their exchange partner coverage.
HIE data exchange relies on several complementary standards. HL7 v2 handles real-time clinical messaging (ADT, orders, results) over MLLP connections. C-CDA (Consolidated Clinical Document Architecture) provides the XML document format for clinical summaries and transitions of care. IHE profiles define the transactions — XDS.b for document sharing, XCA for cross-community access, XCPD for patient discovery, and MHD for FHIR-based document exchange. FHIR R4 is increasingly used for individual access, payer exchange, and SMART on FHIR applications. TEFCA also mandates FAST/UDAP for OAuth 2.0 security and identity proofing across QHIN connections.
A typical HIE implementation takes 6-12 months from readiness assessment through production go-live. Simpler implementations — such as connecting a single facility to an existing QHIN through a Sub-Participant pathway — can be completed in as few as 4-6 months. More complex projects, such as building a new community HIE, connecting multiple organizations simultaneously, or implementing custom patient matching and consent management, may require 9-12 months or longer. The primary variables that affect timeline are the number of participating organizations, the complexity of your EHR environment, and the specific QHIN's onboarding requirements and testing queue.
Carequality and CommonWell Health Alliance are the two largest pre-TEFCA health information exchange frameworks in the United States, and they serve complementary but distinct roles. Carequality is a trust framework that establishes technical and governance rules for query-based clinical document exchange — enabling organizations to find and retrieve patient records across participating networks using IHE XCA and XCPD profiles. Epic's Care Everywhere, Surescripts, and eHealth Exchange all participate in Carequality. CommonWell Health Alliance focuses on patient identity matching, record location, and document retrieval across member EHR platforms including Oracle Health (Cerner), MEDITECH, athenahealth, and others. Since 2020, Carequality and CommonWell have been interoperable, meaning providers connected to either network can exchange data across both. Under TEFCA, CommonWell is itself a designated QHIN, while Carequality remains a separate trust framework — cross-traffic to TEFCA flows through QHINs that participate in both. TEFCA is designed to subsume and extend both networks through a unified national framework of designated QHINs.
FAST (FHIR at Scale Taskforce) and UDAP (Unified Data Access Profiles) define the security and identity framework for TEFCA-based health data exchange. UDAP extends OAuth 2.0 with healthcare-specific requirements for dynamic client registration, certificate-based authentication, and organization identity verification. As of January 2026, FAST/UDAP is a required component of TEFCA connectivity — all QHINs, Participants, and Sub-Participants must implement UDAP-compliant security for their TEFCA-facing interfaces. This means organizations planning QHIN connectivity need to implement UDAP client credentials, configure certificate trust chains, and pass UDAP conformance testing as part of their onboarding process.
Related Services
Keep reading
From TEFCA readiness to QHIN connectivity — let's connect your organization to the national health information network.
Book a 30-min call · or email us and we'll reply within one business day.
Stop your contact information from being used in advertising audiences. Enter the email you used when you contacted Saga IT.
We've recorded your request. You'll be removed from advertising audiences within 24 hours.
We don't sell personal information. We do "share" hashed contact info with Google Ads for Customer Match. Opting out removes you from that audience within ~24h. To request full deletion of your data, email info@saga-it.com.