Architecture
Health Gorilla provides a unified platform for secure, standards-based clinical data exchange across nationwide networks. The platform combines a central FHIR server with shared services for patient identity matching, record location, normalization, and secure storage. Health Gorilla manages all network connectivity, security, and compliance requirements, including HIPAA, TEFCA, and HITRUST certification, so your organization can retrieve, share, and deliver clinical data without managing separate trust agreements or infrastructure.
FHIR Core
At the center of the platform is a high-availability FHIR server that ingests data from external networks and partners, normalizes and deduplicates it, enriches terminology, and stores the results securely. The server exposes RESTful APIs that support synchronous retrieval and real-time event delivery through FHIR subscriptions. All Health Gorilla product families connect to this FHIR core, ensuring that data acquired or generated in one workflow is immediately available to others.
Shared Services
The following shared services operate automatically during every request:
- Master Patient Index (MPI): Matches patient identities across sources using referential data and advanced algorithms.
- Record Locator Service (RLS): Maintains a directory of known record locations to accelerate future queries and reduce network traffic.
- Data Processing Engine: Aggregates, normalizes, and deduplicates records into FHIR R4 resources for a longitudinal patient view.
- National Data Repository: Stores raw source documents and normalized resources under HITRUST R2 and SOC 2 Type 2 controls.
Product Families
The platform powers three product families that share the same security model and FHIR core.
- Record retrieval: Patient360 and the Individual Access Service (IAS) query Carequality, CommonWell, eHealth Exchange, TEFCA-qualified exchanges, and major laboratory partners to build longitudinal patient records.
- Subscription services: Clinical Alerts and ADT messages deliver encounter updates and event notifications through FHIR subscriptions or HL7 v2 Secure File Transfer Protocol (SFTP).
- Orders and results: The Lab Network supports electronic ordering of diagnostic tests and delivery of normalized results.
A new lab result received through orders and results is stored in the FHIR server and becomes immediately available for record retrieval. When applicable, it can also trigger a FHIR-based notification from the FHIR core to your registered webhook. These internal FHIR notifications are distinct from subscription services, which distribute updates about data retrieved from external networks and exchanges.
External Data Sources
Health Gorilla maintains active connections to national interoperability networks and major data partners, eliminating the need for separate agreements or trust frameworks.
Connected sources include Carequality, CommonWell, eHealth Exchange, TEFCA-qualified exchanges, EHR systems, regional and national laboratories, and patient-contributed documents. Incoming data is matched to patient identities, normalized, and deduplicated before being stored in the FHIR core.
Integration Options
Your organization can integrate with the platform using the approach that best fits your workflow.
- Direct FHIR API integration for full programmatic control
- Embedded modules launched with SMART on FHIR or through an iFrame
- Native EHR connectors for seamless clinical workflows
All integration paths leverage the same underlying FHIR core and security model.
Standards
Health Gorilla ensures adherence to U.S. and international interoperability standards, including USCDI, LOINC, SNOMED CT, RxNorm, FHIR R4 and STU3, and HL7 v2. This alignment maintains regulatory compliance and consistent data exchange across all connections.