> ## Documentation Index > Fetch the complete documentation index at: https://docs.athelas.com/llms.txt > Use this file to discover all available pages before exploring further. # Air Mandatory Disclosure > ONC Health IT Certification Program transparency and disclosure statement for Air per 45 CFR § 170.523(k)(1). | **Field** | **Value** | | :--------------------- | :----------------------------------------------------------------------------- | | **Developer** | Commure (d/b/a Athelas) | | **Product** | Air | | **Product Version** | 1 | | **CHPL ID** | [15.04.04.3268.Air1.01.00.1.260617](https://chpl.healthit.gov/#/listing/11864) | | **Certification Date** | June 17, 2026 | | **Last Updated** | June 19, 2026 | This Health IT Module is compliant with the ONC Certification Criteria for Health IT and has been certified by an ONC-ACB in accordance with the applicable certification criteria adopted by the Secretary of Health and Human Services. This certification does not represent an endorsement by the U.S. Department of Health and Human Services. Drummond Group is accredited by ANSI and approved by ONC for the ONC Health IT Certification Program to certify Health IT Module(s) and Certification of other types of Health IT for which the Secretary has adopted certification criteria under Subpart C of 45 CFR. ## Mandatory Disclosure Statement In accordance with the **ONC Health IT Certification Program's Transparency and Disclosure Conditions and Maintenance of Certification** requirements (45 CFR § 170.523(k)(1)), Commure (d/b/a Athelas) provides the following mandatory disclosures regarding the costs, fees, and implementation considerations associated with the certified capabilities of **Air**. ## Relied Upon Software The following third-party software is relied upon to demonstrate compliance with the associated certification criteria: | **ONC Criterion** | **Third-Party Software** | | :----------------------------------------------------------------------- | :----------------------- | | **§170.315(a)(14)** Implantable Device List | NLM AccessGUDID API | | **§170.315(b)(1)** Transition of Care | EMR Direct | | **§170.315(b)(2)** Clinical Information Reconciliation and Incorporation | EMR Direct | | **§170.315(d)(3)** Audit Reports | Google Spreadsheet | | **§170.315(e)(1)** View, Download, and Transmit to 3rd Party | EMR Direct | | **§170.315(g)(6)** Consolidated CDA Creation Performance | EMR Direct | | **§170.315(g)(9)** Application Access — All Data Request | EMR Direct | | **§170.315(g)(10)** Standardized API for Patient and Population Services | Amazon Cognito | ## Costs and Fees Disclosure | **Capability** | **Description of Capability** | **Costs or Fees** | | :----------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **§170.315(a)(5)** Demographics | Enables users to record, change, and access patient demographic information including race, ethnicity, preferred language, sex, sexual orientation, gender identity, date of birth, and related fields per USCDI v3. | Included in standard subscription. | | **§170.315(a)(12)** Family Health History | Enables users to record, change, and access a patient's family health history using SNOMED CT® coded data. | Included in standard subscription. | | **§170.315(a)(14)** Implantable Device List | Enables users to record, change, and access UDI information for a patient's implantable devices, with parsing of UDI data via the NLM AccessGUDID API. | Included in standard subscription. | | **§170.315(b)(1)** Transition of Care | Enables users to create and receive transition of care / referral summaries formatted as C-CDA R2.1 documents containing USCDI v3 data, with Direct Project secure transport. | Included in standard subscription. Optional third-party HISP / Direct fees billed by that provider. | | **§170.315(b)(2)** Clinical Information Reconciliation and Incorporation | Enables users to reconcile and incorporate medications, medication allergies, problems, and other USCDI v3 data from a received C-CDA into the patient record. | Included in standard subscription. | | **§170.315(b)(10)** Electronic Health Information Export | Enables users to perform a patient-level and population-level export of electronic health information in a computable format, with documented export format published publicly. | Included in standard subscription. | | **§170.315(b)(11)** Decision Support Interventions | Enables users to configure and use evidence-based decision support interventions, including drug-drug and drug-allergy contraindication checks, with source attribute management. | Included in standard subscription. | | **§170.315(d)(1)** Authentication, Access Control, and Authorization | Verifies user identity and enforces role-based access controls before granting access to electronic health information. | Included in standard subscription. | | **§170.315(d)(2)** Auditable Events and Tamper-Resistance | Records auditable events (including access, modification, and deletion of ePHI) in a tamper-resistant audit log. | Included in standard subscription. | | **§170.315(d)(3)** Audit Report(s) | Enables authorized users to generate audit reports based on the recorded audit log data. | Included in standard subscription. | | **§170.315(d)(4)** Amendments | Enables users to amend patient records and append patient-supplied amendment requests. | Included in standard subscription. | | **§170.315(d)(5)** Automatic Access Time-Out | Automatically terminates user sessions after a configurable period of inactivity. | Included in standard subscription. | | **§170.315(d)(6)** Emergency Access | Permits identified users emergency access to electronic health information. | Included in standard subscription. | | **§170.315(d)(7)** End-User Device Encryption | Prevents local storage of electronic health information on end-user devices, ensuring ePHI remains protected. | Included in standard subscription. | | **§170.315(d)(8)** Integrity | Verifies the integrity of electronic health information using SHA-256 hashing per §170.210(c)(2). | Included in standard subscription. | | **§170.315(d)(9)** Trusted Connection | Establishes trusted connections for the exchange of electronic health information using transport-level encryption. | Included in standard subscription. | | **§170.315(d)(12)** Encrypt Authentication Credentials | Encrypts stored authentication credentials in accordance with §170.210(a)(2). | Included in standard subscription. | | **§170.315(d)(13)** Multi-Factor Authentication | Supports multi-factor authentication of user identity using industry-recognized standards. | Included in standard subscription. | | **§170.315(e)(1)** View, Download, and Transmit to 3rd Party | Enables patients (and authorized representatives) to view, download, and transmit their health information to a 3rd party, including a method for requesting restrictions on USCDI v3 data. | Included in standard subscription. | | **§170.315(e)(3)** Patient Health Information Capture | Enables users to identify, record, and reference patient-generated health information or data from a non-clinical setting. | Included in standard subscription. | | **§170.315(g)(3)** Safety-Enhanced Design | Product is designed using a user-centered design process (NISTIR 7741) with usability testing across required certification criteria. | Included in standard subscription. | | **§170.315(g)(5)** Accessibility-Centered Design | Product development incorporates accessibility-centered design standards across applicable certified capabilities. | Included in standard subscription. | | **§170.315(g)(6)** Consolidated CDA Creation Performance | Product creates C-CDA documents conforming to C-CDA R2.1 Companion Guide Release 4.1 from source data and does not act as a pass-through. | Included in standard subscription. | | **§170.315(g)(7)** Application Access — Patient Selection | Provides a documented API for application access to patient selection. | Included in subscription. No registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. | | **§170.315(g)(9)** Application Access — All Data Request | Provides a documented API for application access to all data for a single patient, returning USCDI v3 data formatted per C-CDA R2.1. | Included in subscription. No registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. | | **§170.315(g)(10)** Standardized API for Patient and Population Services | Provides a FHIR R4 API conforming to US Core IG v6.1.0 and SMART App Launch v2.0.0 for patient and population-level data access by third-party applications. | Included in subscription. No per-app, per-call, volume, registration, sandbox, or production fees. §170.404(a)(4) fair-and-reasonable fees may apply for value-added services. | ## Considerations and Types of Costs Affecting Implementation, Use, or Interoperability * **Additional software required:** No additional third-party software is required for customers to implement or use the certified capabilities of Air, beyond the relied upon software listed above which is included as part of the product. * **Contractual considerations:** None. There are no contractual considerations that restrict a customer's use, transfer, modification, or exchange of data using the certified capabilities of Air. * **Technical considerations:** None. There are no technical considerations affecting interoperability or data portability of the certified capabilities of Air. * **Customer modification considerations:** None. There are no considerations affecting customer-initiated modifications to the certified capabilities of Air. ## Contact For questions about this disclosure, please contact Commure (d/b/a Athelas) support at [support@athelas.com](mailto:support@athelas.com).