Founder & Lead Engineer, RAITHub
A health startup can reach EHR data four ways: a direct vendor API (Epic, Oracle Health), an aggregator such as Redox, whose startup plan starts at $15,000 a year, a clinical data network such as Health Gorilla, or an HL7 v2 interface run by the hospital. Plan the first live hospital connection in months, not weeks: vendor review, customer IT approval and data mapping set the pace, not coding.
If you would rather have the integration layer built for you, see how RAITHub would build this below.
This is a buyer-level guide: which route fits which product, what each costs, and where the calendar goes. It is not a FHIR coding tutorial. For the wider context on health data rules and patient portals, read the pillar guide, building health software: HIPAA, GDPR and FHIR, and RAITHub's HealthTech development page.
What does "EHR integration" actually mean for a startup?
It means your product reads data from, or writes data to, the electronic health record (EHR) system a clinic or hospital already uses, so clinicians do not retype anything.
In practice there are three kinds of integration, and they are very different projects:
- Read patient data: demographics, problems, medications, allergies, lab results. This is the most common first integration, and modern APIs support it well.
- Write back: notes, documents, orders or results flowing into the chart. Write access is harder to get approved, because a bad write affects patient care.
- React to events: admissions, discharges, new appointments. Historically this has been the territory of HL7 v2 messages from the hospital's interface engine.
Two terms you will hear constantly. HL7 v2 is the older, pipe-delimited messaging standard that hospital systems have exchanged for decades. FHIR (Fast Healthcare Interoperability Resources) is HL7's newer API standard; ONC describes it as designed "to enable health data to be quickly and efficiently exchanged."
What are the options for integrating with Epic, Oracle Health and other EHRs?
Four routes, and most startups end up using two of them.
1. Direct vendor APIs
Epic and Oracle Health both run developer programmes. Epic on FHIR offers a free testing sandbox, client registration and documentation, and says it is "a free resource for developers who create apps for use by patients and healthcare organizations." Epic's open.epic site lists over 750 no-cost APIs and interfaces, and Epic runs a Showroom where developers can request a listing so health systems can find their app.
Oracle Health (formerly Cerner) publishes Millennium Platform FHIR R4 APIs with open and secure sandboxes and an app-registration process. Its documentation has a dedicated section on "API Access and Fees for Registering an App", so read it before you assume the route is free. Oracle also notes it no longer supports its DSTU 2 FHIR APIs, a reminder that versions retire.
In the US, certified EHRs must offer a standardised patient and population API. The ONC criterion 170.315(g)(10) requires FHIR R4, the US Core implementation guide, SMART App Launch authorisation and FHIR Bulk Data for groups of patients. That is why read access to core clinical data is now far more predictable than it was.
The catch: a sandbox is not production. Each hospital that uses your app still has to approve and switch it on in its own environment.
2. Aggregators and unified APIs
An aggregator sits between you and many EHRs. You integrate once with its API; it handles the per-hospital connections, format translation and often the interface engine work.
Redox's pricing page describes a platform tier plus consumption plus optional managed services. Its Sandbox plan starts at $15,000 a year for startups under 500 employees, and its Core plan at $35,000 a year, with Advanced priced on request. Redox's pitch is that each additional endpoint gets cheaper, rather than charging a fee per connection.
3. Clinical data networks
Some products need a patient's records from many places, not a live link into one hospital's chart. Health Gorilla describes itself as a Qualified Health Information Network (QHIN) under TEFCA, the US national exchange framework, and offers EHR data, electronic lab ordering from 120+ vendors, pharmacy data and clinical alerts through an API. Networks suit record retrieval, care coordination and lab ordering; they do not replace a write-back integration into a specific clinic's EHR.
4. HL7 v2 interfaces
Many hospitals still deliver real-time events (admit, discharge, transfer, scheduling, results) as HL7 v2 messages from their own interface engine. You receive a feed over a secure connection, usually a VPN, and the hospital's interface team configures it. It works and it is everywhere, but every site's messages differ slightly, so each new hospital means new mapping and testing.
How do the EHR integration options compare?
| Route | Typical cost signal | Best for | What slows it down | Main risk |
|---|---|---|---|---|
| Direct vendor API (Epic, Oracle Health) | Epic on FHIR is free to developers; check Oracle's app-registration fee notes | Read access to core data in one EHR family; SMART apps launched inside the chart | Each customer's approval and configuration | One integration per EHR vendor; write access is harder |
| Aggregator / unified API (e.g. Redox) | From $15,000 a year (Redox Sandbox) plus consumption | Many EHRs and hospitals through one API; HL7 v2 translated for you | Each hospital still has to set up its side | Platform cost before revenue; dependence on one vendor |
| Clinical data network (e.g. Health Gorilla) | Priced on request | Retrieving records across providers; lab ordering | Onboarding, use-case approval and patient matching | Not a live link into a single clinic's workflow |
| HL7 v2 interface | Hospital interface-team time plus your build | Real-time ADT, scheduling and results feeds | Hospital IT queues, VPN set-up, site-specific mapping | Every site's messages differ |
For a market cost figure for the build itself, Knack's HIPAA app cost guide puts a single Epic or Cerner integration at $20,000–$40,000 on its own. That is a market figure, not a RAITHub quote.
Should we buy, build or hire for EHR integration?
| Option | Example | Choose this when | Skip it when |
|---|---|---|---|
| Buy a product that already integrates | An existing scheduling, intake or telehealth product already listed with your customers' EHR (Epic's Showroom is one place to look) | The workflow is standard and EHR integration is not your differentiator | The integrated workflow is the product you are selling |
| Configure an aggregator | A Redox plan from $15,000 a year, or a network such as Health Gorilla | You need several EHRs or hospitals quickly and have budget before revenue | You have one customer on one EHR and the platform fee would outrun the deal |
| Custom build on direct APIs | Epic on FHIR or Oracle Health FHIR R4 | You start with one EHR family, mostly need reads, and want no per-year platform fee | You need write-back across many EHRs in the first year |
A common pattern: start direct with the EHR your first customers use, keep a clean adapter boundary in your code, and add an aggregator when the second or third EHR vendor arrives.
How long does EHR integration take, and what slows it down?
The code is rarely the long pole. The calendar is set by people outside your team.
| Phase | Who controls the pace | What happens |
|---|---|---|
| Scoping and data mapping | You and a clinical stakeholder | Decide exactly which data you read or write, and map each field to the EHR's representation |
| Sandbox build | Your engineers | Build against the vendor or aggregator sandbox with synthetic patients |
| Vendor review and app registration | The EHR vendor or aggregator | Register the app, request scopes, pass any review the programme requires |
| Customer IT and security approval | The hospital or clinic | Security questionnaire, contracts, data-sharing terms, then a ticket in their IT queue to switch you on |
| Site configuration and testing | Their interface or EHR analysts, with you | Configure the connection, test with their test patients, fix mapping gaps |
| Go-live and monitoring | Both sides | Watch error rates and data quality on real traffic |
Three things stretch timelines more than anything else:
- Vendor review. Registration and any required review sit in someone else's queue. Read the programme's current rules before you promise a date.
- Customer IT approval. Health systems run security reviews and change windows. Expect a questionnaire before any data flows; RAITHub's guide to answering your first security questionnaire covers what they ask.
- Mapping. The same idea, such as an appointment type or a lab code, is represented differently at each site. Every unmapped value is a support ticket later.
These are planning observations, not sourced durations. Ask your EHR vendor or aggregator for its current onboarding times, and ask your first customer how long its last third-party integration took.
How should the integration be designed so we can change routes later?
Put every EHR behind one internal interface, so switching from a direct API to an aggregator, or adding a second vendor, changes one adapter and not your whole product.
A minimal TypeScript sketch of that boundary:
// Your product talks to this, never to Epic, Oracle Health or Redox directly.
export interface PatientSummary {
ehrPatientId: string
name: string
birthDate: string
allergies: string[]
}
export interface EhrAdapter {
source: 'epic' | 'oracle-health' | 'aggregator' | 'hl7v2'
getPatientSummary(ehrPatientId: string): Promise<PatientSummary | null>
// Writes are optional: many first integrations are read-only.
postDocument?(ehrPatientId: string, pdf: Uint8Array): Promise<void>
}
Around that boundary, budget for the parts that are easy to forget: an audit log of every read and write (see how to design an audit log), retries and timeouts because the EHR will be slow or down, and a store of raw inbound messages so mapping bugs can be replayed and fixed.
What does EHR integration cost a startup?
Three separate budgets, and founders often only plan for the first:
- Build: Knack's guide puts one Epic or Cerner integration at $20,000–$40,000.
- Platform: zero for direct Epic on FHIR access, or an annual fee for an aggregator, from $15,000 a year on Redox's Sandbox plan.
- Per site: your team's time on every new hospital's approval, configuration and mapping, which repeats for each customer.
For a rough figure on the rest of your product, try the MVP cost estimator.
Regulatory points here, such as ONC certification rules and TEFCA, are general information; confirm what applies to your product with your compliance adviser.
Why RAITHub for this
RAITHub is a founder-led, QA-first studio in Dhaka. Be clear about the evidence: RAITHub has built a healthcare scheduling app among its 8 client projects, but it has not shipped a live EHR or FHIR integration, and it has not shipped a regulated health product. What it brings is adjacent and proven elsewhere:
- Integration-heavy backends. PadhAI, the AI tutoring platform RAITHub built, runs 11 services and 9 payment gateways; TheSkinProof, the founder's own venture, has 217 API endpoints and bKash, Nagad and SSLCommerz integrations. Each external system was treated as unreliable, with its own adapter.
- Tested releases. PropDesk ships behind 1,024 tests; TheSkinProof behind 750+. Mapping rules for an EHR deserve the same coverage.
- Your controls, your cloud. We sign NDAs and DPAs and work inside your controls. Production and patient data stay in your own covered cloud account; development uses synthetic data from vendor sandboxes.
When you don't need us
- You can buy a product that already integrates with your customers' EHR and the workflow fits. Buy it.
- Your aggregator's managed services already cover the mapping and site set-up, and your team can handle the API calls.
- You need a vendor that has already shipped integrations with your target EHR, or one that will own your compliance programme. Hire a specialist health-integration firm.
- You want developers placed in your team under your management. RAITHub does fixed-scope builds and dedicated teams, not staff augmentation.
How RAITHub would build this
- Scope: one EHR route chosen with you (direct API or aggregator), read-only first, for the specific data your product needs.
- An adapter boundary like the one above, so a second EHR or an aggregator is an addition, not a rewrite.
- Audit logging of every EHR read and write from the first feature, plus raw-message storage for replay.
- Contract and mapping tests against sandbox data, run in CI on every change.
- A web app or PWA for the clinician or patient side; RAITHub does not build native mobile apps.
Timeline: integration and backend work runs in the 6–12 week range of RAITHub's backend and API service; a fixed-scope MVP around it is 4–6 weeks. Vendor review and each hospital's approval run on their calendars, and the written plan shows them separately.
You receive: automated tests and CI, handover docs and runbooks (including what to do when an EHR feed stops), and full IP under NDA.
Next step: book the free 15-minute technical audit, then get a written fixed quote with the vendor and hospital steps listed as assumptions. Do not send patient data in the first message.
Frequently asked questions
Is Epic's API free for startups?
Epic says Epic on FHIR is a free resource for developers, with a free sandbox, and open.epic lists over 750 no-cost APIs and interfaces. Each health system still has to approve and enable your app in its own environment.
Should a startup use Redox or integrate directly?
Integrate directly if your first customers use one EHR family and you mostly need reads. Use an aggregator such as Redox, whose startup plan starts at $15,000 a year, when you need several EHRs or HL7 v2 feeds translated quickly.
Is HL7 v2 still used, or is everything FHIR now?
Both. US certified EHRs must offer FHIR R4 APIs under ONC rules, but many hospitals still send real-time events such as admissions and results as HL7 v2 messages from their interface engines.
How long does a first EHR integration take?
The build can be weeks; the first live hospital connection usually takes longer, because vendor review, customer IT and security approval, and site-specific mapping run on other people's calendars. Ask your vendor and first customer for their current timelines.
How much does EHR integration cost?
Knack's market guide puts one Epic or Cerner integration at $20,000–$40,000 to build, before any aggregator platform fee and the per-site time for each new hospital.
Has RAITHub built an EHR integration?
No. RAITHub has built a healthcare scheduling app for a client and integration-heavy backends in other industries, but not a live EHR or FHIR integration, and the written quote says so.
Related posts
Ready to discuss your project?
Book a free 15-minute technical audit with our engineering team.