Choosing the Right EHR Integration Approach for Your Clinic
There's no single "right" EHR integration approach — it's chosen by your clinic's size, system count, timeline, and in-house engineering capacity. Four options actually exist: point-to-point HL7 v2, vendor-specific APIs, FHIR-based REST APIs, and an interface engine. Each trades cost against flexibility differently, and the right pick for a five-provider clinic is rarely the right pick for a multi-site group.
Every option below has a real engineering cost attached, and not every clinic has the in-house capacity to absorb it — which is why some clinics choose to hire a custom clinical software development partner like YuSMP Group to build and maintain the interface layer rather than carry it themselves. The rest of this guide walks through why, and how to decide if that's the right call for your situation.
What "EHR Integration" Actually Means for a Clinic (vs. a Hospital System)
Most integration guides are written for hospital IT departments with a dozen engineers, a dedicated interface team, and a budget line for an integration engine license. A clinic — one location, or a handful — doesn't have that team, and doesn't need that architecture. The decision isn't "which standard is technically superior." It's "which approach can my clinic actually staff, afford, and keep running without a full-time interface engineer."
That reframing matters because the four approaches below aren't ranked best-to-worst. They're ranked by what they cost you in engineering time versus what they buy you in flexibility. A clinic connecting one lab feed to one EHR has a completely different optimal answer than a six-location group syncing appointments, labs, and billing across three different systems. Scoping the decision to clinic-scale — rather than health-system-scale — is the first step, and it's the step most guides skip. For teams evaluating this as part of a broader build, a custom software development partner familiar with clinic-scale constraints, not hospital-scale ones, can shortcut a lot of this.
Below, we walk through the four approaches a clinic is actually choosing between, when each one fits, what the Cures Act does and doesn't require, and a practical checklist for making the call.
The Four Approaches You're Actually Choosing Between
Every EHR integration project, stripped of vendor marketing, reduces to one of four architectural patterns. Understanding what each one actually involves — not just its name — is what makes the decision table below useful instead of abstract.
Point-to-point HL7 v2 interfaces
HL7 v2 is the oldest standard still in daily use in clinical software, and it's not going anywhere soon — most lab systems, pharmacy systems, and legacy EHRs still speak it as their primary interface language. A point-to-point HL7 v2 interface connects exactly two systems directly: your EHR talks to the lab system, full stop. There's no shared layer, no middleware, no abstraction.
The appeal is that it's fast to stand up for a single connection and well understood — every integration engineer has built one. The cost shows up later: each new connection is another custom interface, with its own message-mapping quirks, its own failure modes, and its own maintenance burden. Five interfaces means five things that can break independently, each requiring someone who remembers how it was built.
Vendor-specific APIs
Most major EHR vendors now expose their own proprietary or semi-proprietary APIs: Epic's App Orchard (now Epic on FHIR), Cerner/Oracle Health's Open APIs, athenahealth's Marketplace. These are built, documented, and versioned by the vendor, which means better support and more predictable behavior than a hand-rolled HL7 interface — but only for that one vendor's ecosystem.
The tradeoff is lock-in. Build against Epic's API and you've built something that works only with Epic. If your clinic ever changes EHR vendors, or needs to integrate with a partner clinic running a different system, that work doesn't transfer. Vendor APIs are a strong choice when you're confident you're staying on that vendor for years and the integration is specific to that relationship (a patient portal, a specific reporting feed).
FHIR-based REST APIs
FHIR (Fast Healthcare Interoperability Resources) is the modern, vendor-neutral standard built on REST and JSON — the same architectural style most web and mobile developers already know, which is part of why it's displacing HL7 v2 for new work. A FHIR API exposes clinical data as structured resources (Patient, Observation, Condition) over standard HTTP, which means a developer who's never touched healthcare software can be productive against it in days, not weeks.
The catch: "supports FHIR" varies wildly in practice. Some EHR vendors expose a rich, well-documented FHIR API; others expose the legal minimum required by regulation (more on that below) and little else. FHIR solves the *format* problem — a consistent way to represent and request data — but it doesn't automatically solve the *coverage* problem of whether the specific data field you need is actually exposed.
An interface engine / hub-and-spoke layer
An interface engine (tools like Mirth Connect are the most common starting point, with commercial options like Rhapsody above it) sits between your EHR and everything else as a translation and routing hub. Instead of five point-to-point interfaces, you build one connection from each system into the engine, and the engine handles translation, routing, and retry logic centrally.
This is the approach that scales — adding a sixth system means one new connection into the hub, not five new point-to-point links. It's also the approach with the highest upfront cost: someone has to stand up and maintain the engine itself, which is a piece of infrastructure in its own right, not just a connection. For a clinic with two or three systems, it's often overkill. For a multi-site group juggling five or more, it starts paying for itself quickly.
Decision Table — Matching the Approach to Your Clinic's Situation
This table is self-contained: if you only read one section of this article, read this one. It compares the four approaches on the dimensions that actually drive a clinic's decision — not technical purity, but cost, time, and what it takes to keep running.
| Approach | Best for | Typical cost profile | Typical timeline | Ongoing maintenance burden |
|---|---|---|---|---|
| Point-to-point HL7 v2 | One or two single-purpose connections (lab, pharmacy) | Lowest per-interface, rises fast past 2–3 | 2–6 weeks per interface | High per connection; no shared tooling |
| Vendor-specific API | Deep integration with one EHR you're staying on long-term | Low-to-moderate, often subsidized by vendor tooling | 4–10 weeks | Moderate; vendor owns the API, but you're locked to it |
| FHIR REST API | New builds, patient-facing apps, multi-vendor flexibility | Moderate; depends on how much the vendor's FHIR API actually exposes | 6–12 weeks | Low-to-moderate; standard tooling, but coverage gaps need workarounds |
| Interface engine / hub | Multi-site groups, 4+ systems, growth expected | Highest upfront (engine + setup) | 8–16 weeks initial build | Low per-connection after setup; one platform to maintain |
Which Approach Fits a Single-Location Clinic vs. a Multi-Site Group?
For a single-location clinic connecting one or two external systems — say, a lab feed and a patient portal — a point-to-point HL7 v2 interface or a FHIR connection (if your EHR vendor exposes a decent one) is usually the right call. The upfront cost of an interface engine isn't justified by two connections; you'd be paying for infrastructure you don't need yet.
The calculus flips once a clinic has three or more external systems, or operates across multiple locations with shared scheduling, billing, or clinical data. At that point, each new point-to-point interface is marginal cost on top of an already-fragile web of connections, and an interface engine's one-time setup cost gets paid back the moment you add system number four. A reasonable rule of thumb: if you can name your interfaces on one hand and don't expect to add more, stay point-to-point or vendor-API. If you're already past that, or growth is part of the plan, evaluate an engine now rather than after the fifth interface breaks for the third time.
Is FHIR Mandatory Now? What the Cures Act Actually Requires
Short answer: partially, and less than most clinics assume. The 21st Century Cures Act's information-blocking rules, enforced by ONC, require certified EHR technology to expose a standards-based API — in practice, FHIR — for patients to access their own health information, and prohibit vendors and providers from unreasonably blocking that access. That's a real, binding requirement, and it's why every major EHR vendor now ships some FHIR capability.
What it does not require is that your clinic build its own clinical integrations exclusively on FHIR. The mandate is about patient access to their own data through certified technology, not about how your clinic chooses to connect its lab system or its billing platform internally. You can be fully compliant with the Cures Act's API requirements while still running HL7 v2 interfaces for your internal system-to-system connections — those are two separate decisions. FHIR is the direction the industry is moving, and for new builds it's usually the sensible default, but "the law requires it" is not the reason to choose it for every connection.
Build In-House, Buy a Platform, or Hire an Integration Partner?
Once you know which architectural approach fits, there's a second decision underneath it: who actually builds and maintains it. Three realistic paths exist.
Build in-house makes sense if you already have engineering capacity and the integration is core to a product you're building — a patient app, a proprietary workflow tool. It gives you full control, but it also means your clinic now owns a piece of infrastructure indefinitely, including every future EHR version change that can quietly break your interface.
Buy a platform (an off-the-shelf interoperability product or an interface-engine SaaS) gets you faster to a working connection with vendor-maintained tooling, at the cost of recurring license fees and less flexibility for anything outside what the platform was built to do.
Hire an integration partner is often the pragmatic middle path for a clinic that needs this built correctly once, with HIPAA-aware architecture and testing baked in, but doesn't want to carry a permanent integration engineering function on staff. A custom clinical software development team that's built interfaces across multiple EHR vendors brings pattern-matched judgment about which of the four approaches above actually fits your situation — judgment that's expensive to build in-house on a single project. This is the point in the decision where clinics without a dedicated integration engineer most often bring in outside help, whether that's Epica for the clinical software itself or custom healthcare software development at YuSMP Group for the surrounding systems work.
Common Mistakes Clinics Make When Choosing an Integration Approach
- Underestimating interface maintenance. The interface that took three weeks to build doesn't stay built — EHR updates, lab system changes, and format drift mean someone has to own it ongoing, not just at launch.
- Ignoring audit-log and HIPAA requirements up front. Access logging and encryption are far cheaper to design in from the start than to retrofit onto an interface that's already moving protected health information.
- Treating FHIR as "done" after one connection. A working FHIR connection to one resource type (say, Patient) doesn't mean the vendor's FHIR API covers everything you'll eventually need — check coverage for your actual use cases before committing the architecture.
- Vendor lock-in without planning for it. A vendor-specific API is a legitimate choice, but only if you've consciously accepted that switching EHRs later means rebuilding that integration from scratch.
- Choosing an interface engine for two connections. The engine's value is in amortizing setup cost across many connections — stood up for just one or two, it's pure overhead.
A Practical Decision Checklist Before You Commit
- Count your actual external systems today — not hypothetical future ones — and separate "need now" from "might need later."
- For each connection, check what your EHR vendor actually exposes: a documented FHIR API, a proprietary API, or HL7 v2 only.
- If you're at three or more systems, or expect to be within 12 months, price out an interface engine against the cumulative cost of point-to-point interfaces.
- Confirm your Cures Act / information-blocking obligations are met through your EHR vendor's certified API — this is usually already handled by the vendor, not something you build yourself.
- Decide who owns ongoing maintenance before you build: an in-house engineer, a platform vendor's support contract, or an outside integration partner.
- Build HIPAA-aware logging and access control into the integration layer from the first interface, not the fifth.
- Re-evaluate the approach when you add a system that doesn't fit the current pattern — don't force a sixth point-to-point interface onto an architecture that should have become a hub two systems ago.
Frequently Asked Questions
Do I need FHIR to be Cures Act compliant?
Your EHR vendor needs to expose a certified, standards-based API (in practice, FHIR) for patient access to their own data. That's typically the vendor's responsibility as part of certification, not something your clinic builds separately — though your own internal integrations can still use HL7 v2 or vendor APIs without violating the rule.
Is HL7 v2 obsolete?
No. It remains the default language for lab systems, pharmacy systems, and many legacy EHR modules. It's not the direction new builds should default to, but for a single well-understood connection to a system that only speaks HL7 v2, replacing it with something else adds cost without adding value.
How much does an interface engine cost to set up?
It varies by vendor and scale, but expect the initial setup — licensing or hosting, plus the engineering time to configure the first few channels — to be the most expensive single line item in this decision, which is exactly why it only pays off once you're past three or four connections.
Can I start with HL7 v2 and migrate to FHIR later?
Yes, and many clinics do exactly that — start with a point-to-point connection to get something working, then migrate to FHIR or an engine once the number of connections justifies the investment. The migration is easier if the HL7 interface was built with clean data mapping from the start.
Build your first interfaces cleanly and the later migration is straightforward; build them as one-off hacks and the migration becomes its own project.
What's the difference between a vendor API and FHIR?
A vendor API (like Epic's App Orchard or Cerner's Open APIs) is proprietary to that vendor's ecosystem. FHIR is a vendor-neutral standard that many vendors, including Epic and Cerner, also expose. Some vendor APIs are themselves built on FHIR under the hood — the practical distinction is whether what you're building against only works with one EHR, or is portable across EHRs that support the standard.
Do small clinics really need an integration strategy, or just a developer?
A single-location clinic with one or two connections can often get by with a developer who's built an HL7 interface before. The "strategy" question matters most once you're choosing between architectures that have real tradeoffs — which is usually the moment a second or third system enters the picture.
Where can I read the FHIR specification itself?
The official specification is maintained by HL7 at hl7.org/fhir. ONC's Cures Act final rule, including the API requirements referenced above, is published at healthit.gov.
Need this done right? Epica builds medical software end to end. Talk to us →