φ(ai) PHI AI
DocumentationDocs
Repository

Bulk export manager

Data leaving the platform in bulk — delivery to the target EMR, HIE contributions, registry submissions, and release-of-information productions. Every export applies the same gates the interface does: sensitive categories are excluded with their counts recorded, Part 2 content refuses redisclosure without its own consent, and a partial export is marked failed rather than presented as complete.

97,398
records in the last completed export · Aug 27, 2026
18,941
sensitive records withheld from it — counted, never silent
Epic
delivery target (from Source & target EMRs)
The run excludes the sensitive categories and records the exclusion counts, like the real delivery path.

Export history

StartedDestinationFormatScope StatusRecords WithheldNotes
2026-08-28 03:00 → Oncology registry FHIR NDJSON cohort: cancer diagnoses failed 4,102 88 Destination rejected batch 9/12 (schema validation). Export marked failed; nothing partial is presented as complete.
2026-08-27 03:00 → Regional HIE FHIR NDJSON full population complete 97,398 18,941 Scheduled HIE contribution. Sensitive categories excluded per the data-sharing agreement; exclusion counts recorded, never silent.
2026-08-26 09:14 → Meridian Life Insurance C-CDA one patient (ROI request) refused 0 0 ROI production refused: the record set contains 42 CFR Part 2 content and the requester supplied no Part 2-specific consent. Redisclosure without specific consent is prohibited; the refusal is the workflow.
2026-08-24 03:00 → Target EMR (Epic) FHIR NDJSON full population complete 95,462 18,856 Delivery to the configured target EMR. 18,856 sensitive-category records excluded at export: psychotherapy notes and Part 2, mental-health, reproductive, HIV and genetic records never leave without their own consent lane.
The refusal in the history is the feature. The insurer's ROI production was refused because the record set contained 42 CFR Part 2 content and no Part 2-specific consent accompanied the request — an export path that honors the same boundary every screen does, and records the refusal where an auditor will find it.