Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Information sheet

The information sheet that accompanies each FerroEHR release, free of charge, as EHDS Art. 30(1)(d) asks (Regulation (EU) 2025/327). EHDS Art. 38(1) asks for “concise, complete, correct and clear information that is relevant, accessible and comprehensible to professional users”, and Art. 38(2) lists what it specifies; each section below is one point of that list. The instructions for use accompany it.

Note

This sheet is published in the book of each release, at https://ferroehr.eu/docs/vX.Y.Z/compliance/information-sheet.html, and attached to each GitHub release as ferroehr-vX.Y.Z-information-sheet.md, a plain-text Markdown file a screen reader reads as text, with that release’s version and date stamped at the top. The book at /docs/dev/ describes the code on main, which is not a release. The article texts are those vendored at docs/law/eu/ehds/text.html. No conformity assessment has been carried out and no EU declaration of conformity exists; nothing on this sheet says that FerroEHR meets the Regulation.

(a) The manufacturer

EHDS Art. 38(2)(a): “the identity, registered trade name or registered trademark, and contact details of the manufacturer and, where applicable, of its authorised representative”.

ManufacturerCadasto B.V.
Postal addressComeniusstraat 2d, 1817 MS Alkmaar, The Netherlands
Single point of contactinfo@cadasto.com
Websitehttps://www.cadasto.com/contact/
Authorised representativenone: Cadasto B.V. is established in the Union
Vulnerability reportsGitHub private vulnerability reporting, or info@cadasto.com (SECURITY.md)
Complaints and serious incidentsinfo@cadasto.com (complaints, incidents and vulnerabilities)

The running server names the manufacturer in the same words on its startup banner, in ferroehr --version and on GET /management/info (the manufacturer and the deployment report). Cadasto B.V. is the manufacturer of every FerroHEALTH product; the FerroHEALTH book describes it at https://ferrohealth.eu/docs/manufacturer.html and its post-market procedure at https://ferrohealth.eu/docs/post-market.html.

(b) Name, version and release date

EHDS Art. 38(2)(b): “the name and version of the EHR system and date of its release”.

  • Name: FerroEHR, one of the two products of the EHR system Cadasto B.V. declares. The other is FerroBRIDGE, which ships the European interoperability software component and publishes its own version, date and information sheet with its releases. The two meet over the openEHR REST API.
  • Version: the release this sheet belongs to: the tag vX.Y.Z, the version ferroehr --version prints, and server_version on GET /ferroehr/rest/status.
  • Release date: the date on the release’s heading in the changelog, ## [X.Y.Z] - YYYY-MM-DD.
  • Support period: five years from the month of the release date; the end month is in the release notes and in SECURITY.md.

(c) Intended purpose

EHDS Art. 38(2)(c): “the intended purpose of the EHR system”.

FerroEHR stores, versions and queries the structured health records of one healthcare provider, and serves them to the software that provider’s health professionals and patients use, through the openEHR REST API and AQL. It records every access to those records in its access log, the European logging software component. It has no clinical user interface of its own, and it is not intended for any medical device purpose. It runs one instance per organisation, operated by the organisation itself, by a processor on its behalf, or by Cadasto B.V. as a hosted service.

FerroEHR’s part of the statement, with the environment and the foreseeable misuse, is the intended purpose. The statement for the EHR system FerroEHR forms with FerroBRIDGE, with its users, is in the FerroHEALTH book at https://ferrohealth.eu/docs/ehds/intended-purpose.html.

(d) The categories of electronic health data

EHDS Art. 38(2)(d): “the categories of electronic health data that the EHR system has been designed to process”.

  • Clinical content: the priority categories of EHDS Art. 14(1), “(a) patient summaries; (b) electronic prescriptions; (c) electronic dispensations; (d) medical imaging studies and related imaging reports; (e) medical test results, including laboratory and other diagnostic results and related reports; and (f) discharge reports”, and any category a Member State adds in national law, as far as the operational templates the deploying organisation loads describe them. Imaging studies are held as attachments or as references to an imaging archive; FerroEHR implements no DICOM image transfer. The deployment declares which templates carry which category in the [audit.categories] map.
  • Identities, in a separate demographic domain: persons, organisations and roles, and their identifiers.
  • The link between a record and its subject, in a separate linkage domain.
  • The access log: who accessed which record, when, from which origin and in which priority category, naming health professionals and patients.

(e) Standards, formats and specifications

EHDS Art. 38(2)(e): “the standards, formats and specifications supported by the EHR system and versions of those standards, formats and specifications”.

Standard or specificationVersionUsed for
openEHR Reference Model (RM)1.2.0, and 1.1.0the record content
openEHR BASE1.3.0, and 1.2.0foundation and base types
openEHR Archetype Model (AM), ADL1.4 and 2.4.0archetypes and templates
openEHR operational templates (OPT)1.4template upload and validation
openEHR Terminology (TERM)3.1.0the openEHR terminology
openEHR ITS-RESTRelease-1.1.0the REST API
openEHR Archetype Query Language (AQL)1.1.0queries
openEHR canonical JSON and XML (ITS-JSON, ITS-XML)ITS-XML Release-1.0.2 and Release-2.0.0 schemasserialisation
openEHR simplified formats (Web Template, FLAT, STRUCTURED)as ITS-REST Release-1.1.0 defines themsimplified data entry and retrieval
IHE ATNA: Record Audit Event (ITI-20), Authenticate Node (ITI-19), Retrieve ATNA Audit Event (ITI-81); IHE Basic Audit Log Patterns (BALP)the profile revision is not pinnedthe access log
DICOM PS3.15 §A.5 audit messagethe edition is not pinnedthe access log over syslog
HL7 FHIR AuditEventR4the access log as FHIR
SyslogRFC 5424, over UDP or TLSthe access-log feed
HL7 FHIR terminology operationsR4Bvalidating codes against external terminology servers
OAuth 2.0 bearer tokens, JWT, OpenID ConnectRFC 6750, RFC 7519, OpenID Connect Core 1.0authentication
OAuth 2.0 Step Up Authentication ChallengeRFC 9470refusing a patient-data request below the configured assurance level
SMART App Launchthe version is not pinned; PKCE per RFC 7636application launch and scopes
TLS1.3 by defaulttransport security
PostgreSQL18the database the deployment provides

Which openEHR generation a deployment serves is a configuration choice (choosing a specification generation). The conformance record measured against the openEHR specifications is on the conformance page; it measures the openEHR specifications, not the EHDS. The European electronic health record exchange format of EHDS Art. 15 has not been adopted, and FerroBRIDGE, not FerroEHR, carries it.