This document defines how Zantrix is divided into capabilities and how those capabilities fit together. It replaces the earlier flat list of numbered modules with a coherent, layered architecture.
The guiding idea is simple. A small number of horizontal platform capabilities provide identity, data, terminology, workflow, and interoperability. Every clinical and operational capability is built on top of that platform and composes it, rather than reinventing it. A cardiology module is not a silo with its own patient store. It is a focused experience over the shared Patient, Encounter, Observation, and Order capabilities, plus a small amount of cardiology specific content.
Each capability lists:
- Purpose. What clinical or operational need it serves.
- Primary FHIR resources. The canonical resources it reads and writes. Zantrix is FHIR native, so these resources are the real storage and API surface, not an export format.
- Depends on. The platform or clinical capabilities it builds on.
- Status. One of
Planned,In design,In progress,Beta, orStable.Betacan describe a delivered milestone slice even when the capability's longer-term purpose is broader; the note states that boundary. The roadmap is authoritative if this catalog ever differs.
| Status | Meaning |
|---|---|
Planned |
Agreed as in scope. Not yet designed in detail. |
In design |
Detailed specification and data model being written. |
In progress |
Implementation underway, not feature complete. |
Beta |
Feature complete, under testing and hardening. |
Stable |
Production ready, covered by tests and documentation. |
- FHIR native. State is stored as FHIR resources in the FHIR platform. Capabilities do not create parallel private tables for clinical data that FHIR already models.
- Composed, not copied. A capability reuses platform capabilities. It does not re-implement patients, identity, audit, or terminology.
- Standards over local invention. Coded data uses SNOMED CT, LOINC, ICD, RxNorm, and similar. Free local codes are a last resort and are always mapped.
- Region neutral core, regional adapters. Country specific behaviour is never hardcoded into the core. It is provided by adapter packs (see the Interoperability and Localization capability).
- Off by default. Capabilities can be enabled per deployment. A clinic runs a handful. A hospital runs many. The core is the same.
- Secure and audited by construction. Every read and write flows through the access control and audit capabilities.
The horizontal foundation. Everything else depends on this layer. This is where the majority of early effort goes, because the quality of the platform sets the ceiling for every capability above it.
- Purpose. The canonical clinical data store and REST API. Hosts the HAPI FHIR R4 JPA server, resource validation against profiles, search, history, transactions, and FHIR operations.
- Primary FHIR resources. All resource types. CapabilityStatement, StructureDefinition, OperationDefinition.
- Depends on. PostgreSQL, Elasticsearch.
- Status.
Beta. Dedicated R4 storage, guarded CRUD/search/history/transactions, base and declared-profile validation, a public M1 facade, consent, audit, and mutation reconciliation are implemented. Regional profile packs, patch/bulk/subscription behavior, and wider resource coverage remain later work.
- Purpose. Authentication, authorization, sessions, and the practitioner and organization directory. Role based and attribute based access, SMART on FHIR scopes, and single sign on.
- Primary FHIR resources. Practitioner, PractitionerRole, Organization, Location, Group, Person.
- Depends on. Keycloak, FHIR Data Platform.
- Status.
Beta. JWT validation, realm-role mapping, SMART scope authorities, current-user lookup, and Organization/Location/Practitioner/PractitionerRole directories are implemented. Full third-party SMART launch context and production federation policy remain later work.
- Purpose. Patient consent, sensitive record flags, and GDPR data subject workflows including access, export, and erasure requests. Enforces consent aware filtering of clinical data.
- Primary FHIR resources. Consent, Flag.
- Depends on. IAM, Audit, FHIR Data Platform.
- Status.
Beta. The M1 slice creates/lists/revokes FHIR Consent, enforces effective permit/deny policy, and provides justified emergency access with audit and mandatory review. GDPR request workflows and sensitive-category policy remain planned.
- Purpose. A tamper evident record of every access and change, with FHIR AuditEvent export, a verifiable hash chain, and reporting for privacy officers. Includes break the glass review.
- Primary FHIR resources. AuditEvent, Provenance.
- Depends on. IAM.
- Status.
Beta. Hash-chain recording and verification, privacy-officer filtering, emergency review, FHIR AuditEvent export, and durable FHIR mutation reconciliation are implemented. Clinical Provenance and production retention/export policy remain later work.
- Purpose. Terminology services for SNOMED CT, LOINC, ICD-10 and ICD-11, RxNorm, and local value sets. Supports lookup, validate-code, translate, and value set expansion, backed by fast search.
- Primary FHIR resources. CodeSystem, ValueSet, ConceptMap, NamingSystem.
- Depends on. FHIR Data Platform, Elasticsearch.
- Status.
Beta. Snowstorm provides licensed SNOMED search/expansion/validation, RxNorm ingredients are validated through NLM, and the M1 vital set uses LOINC/UCUM. Operators supply licensed RF2 content. ICD and broader LOINC/translation management remain planned.
- Purpose. Cross capability tasks, protocols, and automation. Drives worklists, handovers, and reminders. Hosts the CDS Hooks service used by clinical decision support.
- Primary FHIR resources. Task, PlanDefinition, ActivityDefinition, CarePlan.
- Depends on. FHIR Data Platform, IAM.
- Status.
Beta. The M1 Task worklist supports create, filter, claim, start, and complete. PlanDefinition automation, reminders, and CDS Hooks hosting remain planned.
- Purpose. Inbound and outbound integration, and the home for regional adapter packs. Translates HL7 v2 and other formats to and from FHIR, hosts FHIR Subscriptions, and provides the plug points for country specific systems. The Dutch pack (BSN and SBV-Z verification, national exchange, VECOZO eligibility, DBC coding) is the first adapter pack and is disabled by default.
- Primary FHIR resources. MessageHeader, Subscription, Bundle, plus adapter specific mappings.
- Depends on. FHIR Data Platform, Apache Camel.
- Status.
Planned.
- Purpose. Secure in application messaging, notifications, and outbound email or push for staff and patients.
- Primary FHIR resources. Communication, CommunicationRequest.
- Depends on. IAM, Workflow.
- Status.
Planned.
- Purpose. Tenant, organization, and location administration, feature flags for enabling capabilities, and system settings. The control plane for running Zantrix.
- Primary FHIR resources. Organization, Location, HealthcareService, Endpoint.
- Depends on. IAM.
- Status.
Beta. Organization, Location, Practitioner, PractitionerRole, and relational feature-flag administration are implemented. Multi-tenant control-plane and secret-management functions remain planned.
- Purpose. FHIR Bulk Data export, an analytics friendly data store, and the query layer that dashboards, population health, and research build on. Keeps analytics load off the operational store.
- Primary FHIR resources. All resource types via Bulk Data, MeasureReport.
- Depends on. FHIR Data Platform.
- Status.
Planned.
Who the patient is, where they are, and when they are seen.
- Purpose. The single source of truth for patient demographics. Probabilistic duplicate detection, safe merge and unmerge that re-point every referencing resource, VIP and sensitive flags.
- Primary FHIR resources. Patient, RelatedPerson, Person, Linkage.
- Depends on. IAM, Consent, Terminology.
- Status.
Beta. Registration/search, deterministic duplicate scoring, review thresholds, and fingerprint/version-guarded merge/unmerge across M1 references are implemented. VIP/sensitive flags and enterprise probabilistic tuning remain planned.
- Purpose. The encounter lifecycle across outpatient, inpatient, and emergency. Admission, discharge, and transfer, with bed and census views for inpatient care.
- Primary FHIR resources. Encounter, EpisodeOfCare, Location.
- Depends on. Patient and MPI, Administration.
- Status.
Beta. Strict planned/in-progress/finished/cancelled outpatient encounter transitions are implemented. Inpatient admission/transfer/discharge, bed, and census workflows remain planned.
- Purpose. Calendars for practitioners, rooms, and equipment. Appointment booking with conflict detection, waitlists, and slot management.
- Primary FHIR resources. Appointment, Slot, Schedule, ServiceRequest.
- Depends on. Patient and MPI, IAM, Encounters.
- Status.
Beta. Schedule and Slot creation, free-slot search, optimistic slot booking, Appointment conflict detection, and appointment status transitions are implemented. Waitlists and advanced recurrence/capacity remain planned.
- Purpose. Front desk registration and patient self service check in, including identity capture and questionnaire completion.
- Primary FHIR resources. Patient, Coverage, QuestionnaireResponse.
- Depends on. Patient and MPI, Scheduling.
- Status.
Planned.
- Purpose. Insurance and coverage records and eligibility checks. Eligibility calls to national payers are provided by regional adapter packs.
- Primary FHIR resources. Coverage, CoverageEligibilityRequest, CoverageEligibilityResponse.
- Depends on. Patient and MPI, Interoperability and Localization.
- Status.
Betafor the coverage record only. Recording, listing and ending a policy are implemented. Eligibility checking is not: no payer is contacted, and the interface states that what it shows is not a confirmation of payment.
The heart of the record. These capabilities are the narrow core that Zantrix makes excellent first.
- Purpose. The active and resolved problem list, coded to SNOMED CT and ICD.
- Primary FHIR resources. Condition.
- Depends on. Patient and MPI, Terminology.
- Status.
Beta. SNOMED-validated active and resolved Condition workflows are implemented.
- Purpose. Coded allergies and intolerances with substances, reactions, and criticality, feeding decision support.
- Primary FHIR resources. AllergyIntolerance.
- Depends on. Patient and MPI, Terminology.
- Status.
Beta. SNOMED-validated AllergyIntolerance creation, listing, inactivation, and entered-in-error workflows are implemented and feed medication safety.
- Purpose. The full medication lifecycle. Reconciliation, prescribing through computerized provider order entry, the administration record, and dispensing.
- Primary FHIR resources. MedicationRequest, MedicationStatement, MedicationAdministration, MedicationDispense, Medication.
- Depends on. Patient and MPI, Terminology, Clinical Decision Support, Orders.
- Status.
Beta. Reconciliation, prescribing, stop, administration, and dispensing workflows are implemented with RxNorm validation, safety evaluation, DetectedIssue transactions, and documented clinical overrides.
- Purpose. Computerized provider order entry for labs, imaging, procedures, and referrals, and the results that come back, with acknowledgement and worklists.
- Primary FHIR resources. ServiceRequest, DiagnosticReport, Observation, Specimen, Task.
- Depends on. Patient and MPI, Terminology, Workflow.
- Status.
Beta. ServiceRequest and Task placement, Observation/DiagnosticReport result transactions, source-task completion, and review-task creation are implemented.
- Purpose. Structured and narrative notes, templates and smart phrases, addenda, co-signing, and full version history.
- Primary FHIR resources. Composition, DocumentReference, ClinicalImpression.
- Depends on. Patient and MPI, Encounters, Terminology.
- Status.
Beta. Draft/update/sign/addendum Composition workflows, escaped narrative, signer references, signed immutability, and FHIR version history are implemented. Templates and co-signing remain planned.
- Purpose. Vital signs, intake and output, flowsheets, and early warning scores such as NEWS and MEWS.
- Primary FHIR resources. Observation.
- Depends on. Patient and MPI, Terminology.
- Status.
Beta. A bounded LOINC/UCUM vital set, transactional recording, and calculated BMI are implemented. General flowsheets and early-warning scores remain planned.
- Purpose. Drug to drug and drug to allergy interaction checks, dose range checks, and protocol guidance, delivered through CDS Hooks so alerts fire at the point of ordering.
- Primary FHIR resources. DetectedIssue, GuidanceResponse, PlanDefinition.
- Depends on. Workflow, Medications, Allergies, Terminology.
- Status.
Beta. Medication-to-allergy checking and a transparent 15-class expert-consensus high-priority drug interaction pack are enforced during prescribing. It is explicitly non-comprehensive; dose ranges, protocol guidance, and CDS Hooks remain planned.
- Purpose. Longitudinal care plans, goals, and care team coordination.
- Primary FHIR resources. CarePlan, Goal, CareTeam.
- Depends on. Patient and MPI, Workflow.
- Status.
Betafor goals and the care team. A goal is closed by recording its outcome rather than by deletion, and a team is stood down rather than removed. CarePlan itself, which would group these into a plan with activities, remains planned.
- Purpose. Vaccination history and forecasting.
- Primary FHIR resources. Immunization, ImmunizationRecommendation.
- Depends on. Patient and MPI, Terminology.
- Status.
Beta. Recording a dose, the vaccination history, and correcting a mistaken entry without removing it are implemented. Forecasting and ImmunizationRecommendation remain planned.
- Purpose. The clinician facing worklist and inbox that unifies results, tasks, messages, and items needing sign off.
- Primary FHIR resources. Task, Communication, DiagnosticReport.
- Depends on. Orders and Results, Workflow, Notifications.
- Status.
Planned.
Departments that produce and manage diagnostic data. Each builds on Orders and Results rather than defining its own ordering flow.
| Capability | Purpose | Primary FHIR resources | Status |
|---|---|---|---|
| D1. Laboratory (LIS) | Chemistry and hematology, analyzer integration | ServiceRequest, Specimen, Observation, DiagnosticReport | Planned |
| D2. Microbiology | Cultures, sensitivities, resistance | Observation, DiagnosticReport | Planned |
| D3. Pathology | Tissue and biopsy workflow, macroscopy | ServiceRequest, DiagnosticReport, Specimen | Planned |
| D4. Radiology (RIS) | Imaging orders, protocolling, reporting | ServiceRequest, ImagingStudy, DiagnosticReport | Planned |
| D5. Imaging and PACS (DICOMweb) | Diagnostic image viewing inside the record | ImagingStudy, Media | Planned |
| D6. Pharmacy | Inpatient and outpatient dispensing and stock | MedicationDispense, SupplyRequest | Planned |
| D7. Blood Bank | Typing, issue, and transfusion records | Observation, BiologicallyDerivedProduct | Planned |
| D8. Nutrition and Dietetics | Diet orders, tube feeding, kitchen integration | NutritionOrder | Planned |
Specialty experiences composed from the Clinical Core plus specialty content. They add focused workflows and coded content, not parallel infrastructure.
| Capability | Focus | Status |
|---|---|---|
| S1. Emergency Department | Triage, trackboard, rapid ordering | Planned |
| S2. Perioperative and Operating Room | Case scheduling, counts, pre and post op | Planned |
| S3. Anesthesia | Intraoperative record | Planned |
| S4. Intensive Care | High density monitoring and device data | Planned |
| S5. Maternity and Obstetrics | Pregnancy record, partogram | Planned |
| S6. Neonatology | Growth and feeding for newborns | Planned |
| S7. Oncology | Multi day chemotherapy protocols and dosing | Planned |
| S8. Cardiology | ECG and echo integration | Planned |
| S9. Nephrology and Dialysis | Dialysis protocols | Planned |
| S10. Behavioral Health | Seclusion records, risk assessment, strict privacy | Planned |
| S11. Rehabilitation and Orthopedics | Functional scores, prosthesis registry | Planned |
| S12. Ophthalmology | Refraction and retinal documentation | Planned |
| S13. Dental and Maxillofacial | Odontogram | Planned |
| S14. Clinical Genetics | Pedigree and sequencing results | Planned |
| S15. Wound Care | Timeline with photo capture and measurements | Planned |
| S16. Infection Control | Multi resistant organism detection and contact tracing | Planned |
| S17. Transplant | Donor and recipient matching | Planned |
| S18. Pediatrics | Age based reference ranges and growth curves | Planned |
| S19. Endoscopy | Procedure workflow and image capture | Planned |
Capabilities that reach the patient directly, mostly delivered as SMART on FHIR patient facing applications.
| Capability | Purpose | Primary FHIR resources | Status |
|---|---|---|---|
| E1. Patient Portal | Appointments, results, documents, messaging | Patient, Appointment, DiagnosticReport, Communication | Planned |
| E2. Telehealth | Video consultation alongside the record | Encounter, Appointment | Planned |
| E3. Questionnaires, PROMs and PREMs | Outcome and experience measures | Questionnaire, QuestionnaireResponse | Planned |
| E4. Remote Patient Monitoring | Device and wearable data ingestion | Observation, Device | Planned |
| E5. Outreach and Recall | Preventive care campaigns and reminders | CommunicationRequest, Group | Planned |
Financial capabilities. Regional billing rules are provided by adapter packs. The core models charges and claims in a standard way.
| Capability | Purpose | Primary FHIR resources | Status |
|---|---|---|---|
| R1. Coding | Diagnosis and procedure coding | Condition, Procedure, ChargeItem | Planned |
| R2. Charge Capture | Turning activity into billable items | ChargeItem, ChargeItemDefinition | Planned |
| R3. Claims and Billing | Claims, invoices, and patient statements | Claim, ClaimResponse, Invoice | Planned |
| R4. Contract Management | Payer price agreements and caps | Contract | Planned |
| R5. Cost Accounting | Cost versus revenue per treatment | ChargeItem, Invoice | Planned |
The logistics that keep a facility running.
| Capability | Purpose | Primary FHIR resources | Status |
|---|---|---|---|
| O1. Bed Management | Bed status and capacity | Location, Encounter | Planned |
| O2. Patient Transport | Moving patients within a facility | Task, Location | Planned |
| O3. Environmental Services | Cleaning and turnover of beds and rooms | Task, Location | Planned |
| O4. Supply Chain and Inventory | Procurement, stock, and implant registry | SupplyRequest, SupplyDelivery, Device | Planned |
| O5. Sterile Processing | Instrument sterilization tracking | Device, Task | Planned |
| O6. Medical Device Integration | Live data from monitors and pumps | Device, Observation | Planned |
| O7. Workforce and Rostering | Staff scheduling and capacity | PractitionerRole, Schedule | Planned |
Capabilities that turn the record into insight, all built on the Analytics and Reporting Platform.
| Capability | Purpose | Primary FHIR resources | Status |
|---|---|---|---|
| I1. Operational Dashboards | Real time KPIs such as occupancy and wait times | MeasureReport | Planned |
| I2. Population Health | Cohort identification and risk stratification | Group, Measure, MeasureReport | Planned |
| I3. Research and Clinical Trials | De-identified cohort data for research | ResearchStudy, ResearchSubject | Planned |
| I4. Predictive Models | Models such as sepsis risk and no show prediction | RiskAssessment | Planned |
Zantrix does not try to build all of the above at once. The first goal is a small set of capabilities, built to a genuinely production grade standard, that together form a usable EHR for an outpatient setting. That core is:
- Platform: P1 FHIR Data Platform, P2 IAM, P3 Consent and Privacy, P4 Audit, P5 Terminology, P6 Workflow, P9 Administration.
- Patient Administration: A1 Patient and MPI, A2 Encounters, A3 Scheduling.
- Clinical Core: C1 Problems, C2 Allergies, C3 Medications, C4 Orders and Results, C5 Clinical Documentation, C6 Vitals, C7 Clinical Decision Support.
Everything else in this document is deliberately deferred until the core is excellent. The sequencing and acceptance criteria live in the roadmap.