Ecosystem governance
App marketplace
Review SMART-on-FHIR apps requesting publication, monitor install posture, and govern scopes available to tenants.
Listed apps
184
In review
11
Certified partners
46
Installs (30d)
2,108
Submission queue
- Security reviewRetinaScreen AI · v2.4Vendor: Iris Health · scopes: user/Observation.rs
- Pen test pendingOncoNotes ScribeNew listing · ambient capture
- Auto-approve eligibleFalls Risk PredictorUpdated FHIR scopes (-Patient.delete)
- Privacy DPIA neededCHW OutreachCommunity connector · iOS only
- Recert checklistHeart Failure PathwayCert renewal · annual
Scope policy
- No bulk PHI export without DUA + tenant opt-in
- Write scopes require step-up auth + audit hook
- Background sync capped at 10 RPS / install
- Persistent refresh tokens limited to 30 days
Trust signals shown to tenants
- HITRUST r2 / SOC 2 Type IIshown
- USCDI v4 conformanceshown
- Annual pen test attestationshown
- Customer-deployment maturityshown