Onyx and healthKERI Demonstrate First Implementation of HL7 FAST Security Using UDAP and vLEI
Led by Onyx and healthKERI with participation from DirectTrust, CARIN Alliance and GLEIF, demonstration advances
Press Release Disclaimer: This is a press release distributed through the XPR Media network. It has not been independently verified by our newsroom.
Led by Onyx and healthKERI with participation from DirectTrust, CARIN Alliance and GLEIF, demonstration advances trusted healthcare API exchange.
FRISCO, TX, UNITED STATES, November 10, 2026 /EINPresswire.com/ — Onyx and healthKERI today announced a demonstration of HL7® FAST Security using Unified Data Access Profiles (UDAP) together with verifiable Legal Entity Identifier (vLEI) credentials. The demonstration shows how healthcare organizations can verify who is requesting data, under whose authority, and for what purpose before enabling secure API exchange.
The joint demonstration, led by Onyx and healthKERI with participation from DirectTrust, the CARIN Alliance and the Global Legal Entity Identifier Foundation (GLEIF), addresses a growing challenge in healthcare interoperability: establishing trust between organizations that may have no existing relationship. By incorporating verifiable organizational identity into established API security workflows, the approach offers a path toward more scalable, secure exchange without relying solely on manual onboarding and individual agreements.
“UDAP gave healthcare a common way to secure connections between organizations. What it hasn’t had is a verifiable way to know which organization stands behind a request, who authorized it and why,” said Mark Scrimshire, Chief Interoperability and Innovation Officer at Onyx. “Pairing FAST Security with the vLEI provides a critical foundation for trusted exchange at scale and advances the broader mission of making healthcare interoperability secure, scalable and affordable.”
Demonstrating verifiable trust in practice
The implementation combines UDAP, profiled in the HL7 FAST Security Implementation Guide, with vLEI credentials that provide cryptographically verifiable evidence of organizational identity and delegated authority.
In the demonstration, a requesting organization presents its verifiable credentials, which Onyx validates alongside the request’s role and stated purpose of use. Once the data holder approves access, the requesting system completes UDAP dynamic client registration.
The result is a standards-based approach to establishing trust between organizations while preserving each data holder’s control over access decisions.
“Trusted healthcare exchange requires more than securing an API connection. Organizations need verifiable evidence of who is making a request and under whose authority,” said Jared Jeffery, CEO of healthKERI. “Our work with Onyx demonstrates how that evidence can be incorporated into established interoperability standards, creating a more scalable approach to establishing trust across organizational boundaries.”
Supporting the next phase of healthcare interoperability
The implementation is particularly relevant as health plans expand API-based exchange under the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F).
Payer-to-payer exchange, provider access and prior authorization workflows increase the need to establish trust across organizations, networks and delegated partners. Making organizational identity and authority machine-verifiable offers a path to reducing manual onboarding, strengthening security and scaling trusted exchange.
The demonstration follows the October 19 announcement by DirectTrust and the Global Legal Entity Identifier Foundation (GLEIF) of plans to develop a Qualification Agent model supporting wider vLEI adoption in U.S. healthcare. While that framework continues to develop, the Onyx and healthKERI implementation demonstrates how vLEI credentials can be applied within FHIR API security workflows today.
Learn more about the Onyx and healthKERI demonstration, preview the approach and request a technical walkthrough:
https://info.onyxhealth.io/trusted-exchange
About Onyx
Onyx is a healthcare interoperability and data intelligence platform company helping health plans move from data exchange to data intelligence. Through OnyxOS, Onyx enables health plans to build a reusable interoperability foundation that acquires, normalizes and governs healthcare data once, making it usable across the enterprise.
Supporting more than 60 health plans and 25 state Medicaid programs, Onyx helps organizations meet evolving interoperability requirements while applying connected data and intelligence to digital quality, risk adjustment, care gap closure, payment integrity and other critical payer priorities. Learn more at onyxhealth.io.
About healthKERI
healthKERI is a cybersecurity company building verifiable identity and trust infrastructure for healthcare and other highly regulated industries. Built on open-source, open-standard protocols, healthKERI enables organizations, systems, and AI agents to cryptographically verify identity and authorization, establish secure connections, and maintain verifiable records of digital interactions. Its Root of Trust platform establishes the cryptographically verifiable foundation of digital identity within an organization, including people, devices, systems, and agents.
For more information, visit healthkeri.com.
Kate Mosteller
Onyx Technology, LLC
+1 978-810-1343
Visit us on social media:
LinkedIn
YouTube
X
Legal Disclaimer:
EIN Presswire provides this news content “as is” without warranty of any kind. We do not accept any responsibility or liability
for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this
article. If you have any complaints or copyright issues related to this article, kindly contact the author above.
Media gallery
