Payerbox Docs

Releases

This page tracks notable changes across Payerbox — the Interop APIs, the Prior Auth (ePA) APIs, and the FHIR App Portal.

This is the May 2026 release (tag 2605); the apps run on an Aidbox FHIR server. Each component heading below links to its image on Docker Hub.

Interop APIs 2605

Provider Access

  • Added the $provider-member-match operation: asynchronous demographic matching with treatment attestation and opt-out consent checks. See Provider Access.
  • Added the $davinci-data-export operation: an asynchronous FHIR Bulk Data export over a member Group, used by both Provider Access and Payer-to-Payer.

Payer-to-Payer

  • Added the $bulk-member-match operation: asynchronous demographic matching with mandatory per-member HRex consent opt-in, returning matched, non-matched, and consent-constrained result buckets. See Payer-to-Payer.

Provider Directory

  • Added a CMS Medicare Plan Finder (MPF) provider-directory export (opt-in per deployment): builds the MPF provider feed and publishes a public index URL per Medicare Advantage contract and reporting year, designed to run on a daily schedule.

Prior Auth (ePA) APIs 2605

CDS Hooks

CRD

  • Custom-response mode (CDS_DECISION_SERVICE_CUSTOM_RESPONSE): the decision service returns simplified per-order decisions and Payerbox assembles the CDS Hooks–conformant response — a CRD STU2 systemActions array the EHR applies automatically, with cards kept informational.
  • Required request headers can be enforced via CDS_REQUIRED_HEADERS. See CRD.

DTR

  • DTR delivers coverage questionnaires and rules to the EHR or the SMART App via the $questionnaire-package operation, with client-side FHIRPath prefill. See DTR.

PAS

  • Added the Claim/$submit (initial prior-authorization submission) and Claim/$inquire (status check) operations. See PAS.
  • Added the $submit-attachment operation (Da Vinci CDeX) for attaching supporting clinical documents.
  • Added asynchronous result delivery: completed decisions are delivered to the EHR as a PAS Response Bundle via a topic-based FHIR Subscription.
  • When additional documentation is submitted via $submit-attachment, the prior authorization is re-queued for review (ClaimResponse disposition "Pending Review").

FHIR App Portal 2605

Developer Portal

  • Register SMART apps with configurable scopes and supported search parameters, including DSI (decision-support intervention) transparency fields. See Developer Portal.
  • Register backend (system) services for the bulk data APIs; these clients authenticate with a customer-supplied jwks_uri (JWKS URL) rather than a client secret. See Authentication.

Admin Portal

  • Enroll and manage members (patients) from the portal via a verification-email signup flow. See Admin Portal.
  • Manage admin users: create, delete, reset passwords, and disable 2FA.
  • Audit-event log viewer with search and detail, plus a PHI Access viewer scoped to SMART-app activity.
  • Configurable portal branding and theming, configurable Terms of Service and Privacy Policy, configurable email provider, and single- and multi-organization support.

FHIR App Gallery

  • Discover, launch, and test registered SMART apps. See FHIR App Gallery.
  • Patients can review their connected apps and revoke access.

Security & Authentication

  • Multi-tenant deployments: host multiple organizations on one instance with per-organization data isolation, built on Aidbox OrgBAC. Org-scoped admins manage only their own organization.
  • Role-based access control: admin, developer, and patient roles gate the Admin Portal, Developer Portal, and app gallery.

Last updated: