
Guides, checklists and tools
Healthcare software resources from the Agnotic engineers who build HIPAA-ready apps, EHR integrations and healthcare AI. Use them to plan your project or brief a development partner, then bring the result to a scoping call.
15-Minute Scoping CallChecklist
HIPAA app engineering checklist
Checklist
HIPAA Security Rule checklist
Checklist
Epic integration planning checklist
Tool
Healthcare AI readiness assessment
Glossary
Healthcare AI and interoperability glossary
Plain definitions of healthcare AI and interoperability terms, from ambient scribe and RAG to FHIR, CDS Hooks and USCDI.
What healthcare software resources does Agnotic publish?
Agnotic Technologies publishes free healthcare software resources for teams planning a build: a HIPAA app engineering checklist, an Epic integration planning checklist, a healthcare AI readiness assessment, a software scope builder and two glossaries. Each one is free, needs no sign-up and turns a planning question into a list you can act on.
Last reviewed by the Agnotic Technologies engineering team
Which resource should you start with?
Start from where your project is today.
| Your situation | Start with | What you get |
|---|---|---|
| You have an idea and need a scope to brief a team | Healthcare software scope builder | Features, users, integrations and risks in one scope |
| Your app will store or send patient data | HIPAA app engineering checklist | Security Rule controls as engineering tasks |
| A health system on Epic wants your product connected | Epic integration planning checklist | Access path, scopes, client tasks and a go-live plan |
| Leadership wants an AI pilot | Healthcare AI readiness assessment | Readiness by area and the use cases to pilot first |
| A term in a spec or RFP is unclear | Healthcare AI and interoperability glossary | Plain definitions with official sources |
Which tools help you plan a healthcare build?
Interactive tools that run in your browser. Your answers are not sent to Agnotic.
Which checklists cover compliance and integration?
Tick-through checklists you can work through and share with your team.
- Checklist
HIPAA app engineering checklist
Access, audit logging, encryption, vendor and recovery controls as engineering tasks, each mapped to the HIPAA Security Rule.
- Checklist
HIPAA Security Rule checklist
Every Security Rule standard in 45 CFR 164.308 to 164.316 as a task, in the rule's own order, with required and addressable items marked.
- Checklist
Epic integration planning checklist
Plan an Epic integration before you write code: access path, sponsor, FHIR scopes, client site tasks, testing and go-live.
Where can you look up healthcare software terms?
Definitions written for product and engineering decisions.
Where can you compare build options?
Decision guides for choices such as build or buy and which integration approach to take.
Which standards do these resources follow?
Each resource names the rule or standard behind its items. These are the main ones.
The HIPAA Security Rule requires administrative, physical and technical safeguards for electronic protected health information.
Source: 45 CFR Part 164 Subpart C (eCFR)The ONC (ASTP) certification criterion for standardized APIs, 45 CFR 170.315(g)(10), references FHIR R4, the US Core implementation guide and the SMART App Launch guide.
Source: ONC (ASTP), HealthIT.govThe NIST AI Risk Management Framework, released in January 2023, is intended for voluntary use and is organized around the functions Govern, Map, Measure and Manage.
Source: NISTCDS Hooks is an HL7 specification for invoking decision support from within a clinician's workflow.
Source: HL7 CDS Hooks
What happens after you use a resource?
Agnotic Technologies is a software development services company. When you want the work built, this is how it starts.
Scoping call
Bring your checklist, assessment or scope. We go through the gaps and the open questions with you.
Fixed-scope first release
We agree the first release and build it, with HIPAA safeguards and audit logging designed in from the start.
Build, review and extend
You see working software regularly, and we add integrations and features in agreed phases.
Which services do these resources support?
- EHR integration servicesEpic, Oracle Health (Cerner) and other EHR integrations.
- HIPAA requirements for software teamsHow the Security Rule turns into architecture decisions.
- Healthcare compliance software developmentHIPAA, SOC 2, HITRUST, FDA SaMD and GDPR engineering.
- Femtech app developmentWomen's health products built for privacy and clinical trust.
- Healthcare software developmentEverything Agnotic builds for providers, payers and digital health teams.