| §170.315(a)(5) Demographics | Enables users to record, change, and access patient demographic information including race, ethnicity, preferred language, sex, sexual orientation, gender identity, date of birth, and related fields per USCDI v3. | Included in standard subscription. |
| §170.315(a)(12) Family Health History | Enables users to record, change, and access a patient’s family health history using SNOMED CT® coded data. | Included in standard subscription. |
| §170.315(a)(14) Implantable Device List | Enables users to record, change, and access UDI information for a patient’s implantable devices, with parsing of UDI data via the NLM AccessGUDID API. | Included in standard subscription. |
| §170.315(b)(1) Transition of Care | Enables users to create and receive transition of care / referral summaries formatted as C-CDA R2.1 documents containing USCDI v3 data, with Direct Project secure transport. | Included in standard subscription. Optional third-party HISP / Direct fees billed by that provider. |
| §170.315(b)(2) Clinical Information Reconciliation and Incorporation | Enables users to reconcile and incorporate medications, medication allergies, problems, and other USCDI v3 data from a received C-CDA into the patient record. | Included in standard subscription. |
| §170.315(b)(10) Electronic Health Information Export | Enables users to perform a patient-level and population-level export of electronic health information in a computable format, with documented export format published publicly. | Included in standard subscription. |
| §170.315(b)(11) Decision Support Interventions | Enables users to configure and use evidence-based decision support interventions, including drug-drug and drug-allergy contraindication checks, with source attribute management. | Included in standard subscription. |
| §170.315(d)(1) Authentication, Access Control, and Authorization | Verifies user identity and enforces role-based access controls before granting access to electronic health information. | Included in standard subscription. |
| §170.315(d)(2) Auditable Events and Tamper-Resistance | Records auditable events (including access, modification, and deletion of ePHI) in a tamper-resistant audit log. | Included in standard subscription. |
| §170.315(d)(3) Audit Report(s) | Enables authorized users to generate audit reports based on the recorded audit log data. | Included in standard subscription. |
| §170.315(d)(4) Amendments | Enables users to amend patient records and append patient-supplied amendment requests. | Included in standard subscription. |
| §170.315(d)(5) Automatic Access Time-Out | Automatically terminates user sessions after a configurable period of inactivity. | Included in standard subscription. |
| §170.315(d)(6) Emergency Access | Permits identified users emergency access to electronic health information. | Included in standard subscription. |
| §170.315(d)(7) End-User Device Encryption | Prevents local storage of electronic health information on end-user devices, ensuring ePHI remains protected. | Included in standard subscription. |
| §170.315(d)(8) Integrity | Verifies the integrity of electronic health information using SHA-256 hashing per §170.210(c)(2). | Included in standard subscription. |
| §170.315(d)(9) Trusted Connection | Establishes trusted connections for the exchange of electronic health information using transport-level encryption. | Included in standard subscription. |
| §170.315(d)(12) Encrypt Authentication Credentials | Encrypts stored authentication credentials in accordance with §170.210(a)(2). | Included in standard subscription. |
| §170.315(d)(13) Multi-Factor Authentication | Supports multi-factor authentication of user identity using industry-recognized standards. | Included in standard subscription. |
| §170.315(e)(1) View, Download, and Transmit to 3rd Party | Enables patients (and authorized representatives) to view, download, and transmit their health information to a 3rd party, including a method for requesting restrictions on USCDI v3 data. | Included in standard subscription. |
| §170.315(e)(3) Patient Health Information Capture | Enables users to identify, record, and reference patient-generated health information or data from a non-clinical setting. | Included in standard subscription. |
| §170.315(g)(3) Safety-Enhanced Design | Product is designed using a user-centered design process (NISTIR 7741) with usability testing across required certification criteria. | Included in standard subscription. |
| §170.315(g)(5) Accessibility-Centered Design | Product development incorporates accessibility-centered design standards across applicable certified capabilities. | Included in standard subscription. |
| §170.315(g)(6) Consolidated CDA Creation Performance | Product creates C-CDA documents conforming to C-CDA R2.1 Companion Guide Release 4.1 from source data and does not act as a pass-through. | Included in standard subscription. |
| §170.315(g)(7) Application Access — Patient Selection | Provides a documented API for application access to patient selection. | Included in subscription. No registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. |
| §170.315(g)(9) Application Access — All Data Request | Provides a documented API for application access to all data for a single patient, returning USCDI v3 data formatted per C-CDA R2.1. | Included in subscription. No registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. |
| §170.315(g)(10) Standardized API for Patient and Population Services | Provides a FHIR R4 API conforming to US Core IG v6.1.0 and SMART App Launch v2.0.0 for patient and population-level data access by third-party applications. | Included in subscription. No per-app, per-call, volume, registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. |
