| Connection type | Veradigm FHIR R4 APIs with OAuth 2.0 |
|---|---|
| Where it runs | Cloud to cloud. Nothing to install on your servers or workstations |
| Application name | HealthArc |
| Who approves it | Veradigm reviews and provisions each request |
| What we need | Practice ID, Client ID, Client Secret, practice name and any endpoints Veradigm supplies |
| Security | HIPAA compliant, SOC 2 compliant, BAA signed before any data moves |
Exact fields depend on your Veradigm configuration and the programs you run, and are confirmed in writing during scoping. HealthArc only requests the data those programs need.
None of this needs an IT team. Most of it is a decision or a name, and the scoping call covers anything you haven’t settled yet.
Total time from your team, across the whole setup. HealthArc does the build.
Where your time goes
We confirm the programs you want to run, the providers and locations involved, and who owns clinical work and billing on your side. The HealthArc agreement and business associate agreement are signed before any data moves.
Complete the Partner Request form in the Veradigm Developer Portal with your organization and contact details. When asked for integration details, enter:
Veradigm’s onboarding team reviews the request, registers HealthArc for your practice, provisions API access and sends OAuth credentials with onboarding instructions. The review may include verifying the practice and the intended use.
Share these securely with your HealthArc implementation team:
If your Veradigm environment asks for it, approve HealthArc’s access to your practice data. This lets HealthArc retrieve the approved clinical information over OAuth 2.0.
Once we have access, our implementation team configures the Veradigm connection, validates authentication and data access, maps providers and locations, and tests with a small pilot group. Your Customer Success Manager confirms when the integration is complete, and we train your team before enrollment opens.
| Task | Your practice | HealthArc |
|---|---|---|
| Submit the Partner Request | Yes | – |
| Provision the application | – | – |
| Share credentials securely | Yes | – |
| Authorize access (if required) | Yes | – |
| Technical build, mapping and testing | – | Yes |
| Staff training | – | Yes |
| Ongoing monitoring and support | – | Yes |
A business associate agreement is signed before any patient data moves.
Databases are encrypted at rest, and data in transit uses TLS only.
HealthArc’s security program follows the SOC 2 framework, and the platform is HIPAA compliant.
Data is stored on AWS in the United States.
Full details are on the HealthArc security page.
Submit Veradigm’s Partner Request form naming HealthArc as the application and FHIR R4 as the API type, wait for Veradigm to provision access, send HealthArc the practice ID, Client ID and Client Secret, and authorize access if Veradigm asks.
Yes. Email Veradigm Connect at veradigmconnect@veradigm.com with the subject “Request for Veradigm FHIR Integration with HealthArc”, and include your practice and organization names, contact name and email, practice location, the requested integration, HealthArc as the application name and FHIR R4 as the API.
No. Veradigm reviews and provisions each request before issuing credentials, and HealthArc can’t configure the integration until those credentials exist.
Your practice ID, Client ID, Client Secret and practice name, plus any FHIR base URL or OAuth endpoints Veradigm provides.
Yes. The process applies to Veradigm EHR and Veradigm Practice Fusion accounts.
Veradigm and Practice Fusion are trademarks of Veradigm. HealthArc is an independent company.