Bulk export manager
Data leaving the platform in bulk — delivery to the target EMR, HIE contributions, registry submissions, and release-of-information productions. Every export applies the same gates the interface does: sensitive categories are excluded with their counts recorded, Part 2 content refuses redisclosure without its own consent, and a partial export is marked failed rather than presented as complete.
97,398
records in the last completed export · Aug 27, 2026
18,941
sensitive records withheld from it — counted, never silent
Epic
delivery target (from Source & target EMRs)
Export history
| Started | Destination | Format | Scope | Status | Records | Withheld | Notes |
|---|---|---|---|---|---|---|---|
| 2026-08-28 03:00 → | Oncology registry | FHIR NDJSON | cohort: cancer diagnoses | failed | 4,102 | 88 | Destination rejected batch 9/12 (schema validation). Export marked failed; nothing partial is presented as complete. |
| 2026-08-27 03:00 → | Regional HIE | FHIR NDJSON | full population | complete | 97,398 | 18,941 | Scheduled HIE contribution. Sensitive categories excluded per the data-sharing agreement; exclusion counts recorded, never silent. |
| 2026-08-26 09:14 → | Meridian Life Insurance | C-CDA | one patient (ROI request) | refused | 0 | 0 | ROI production refused: the record set contains 42 CFR Part 2 content and the requester supplied no Part 2-specific consent. Redisclosure without specific consent is prohibited; the refusal is the workflow. |
| 2026-08-24 03:00 → | Target EMR (Epic) | FHIR NDJSON | full population | complete | 95,462 | 18,856 | Delivery to the configured target EMR. 18,856 sensitive-category records excluded at export: psychotherapy notes and Part 2, mental-health, reproductive, HIV and genetic records never leave without their own consent lane. |
The refusal in the history is the feature. The insurer's ROI
production was refused because the record set contained 42 CFR Part 2 content and
no Part 2-specific consent accompanied the request — an export path that honors the
same boundary every screen does, and records the refusal where an auditor will find
it.