SpecsModelExplore
Overview
Actors
External Systems
Clinical Data Product
Clinical Ingestion
Clinical Data
Analytics & Research
Clinical Apps
Governance & Audit
Audit Service
Consent Service
Consent RepositoryPolicy Engine
Access Review
Policy Engine
Responsibilities
SpecsModelExplore
Policy Engine
OverviewGuideLinks and Communications

Policy Engine

The Policy Engine evaluates access requests against latest consent and organizational policy — used by FHIR gateway and de-id pipeline.

Hot reload

Portal consent updates reload policy without redeploying gateways.

Responsibilities

  • Purpose-of-use aware (treatment, research, HIO).
  • Deny-by-default for research when consent absent.
  • Reads Consent Repository.