Questions regarding review / update of existing smart on FHIR apps

[Developer HTK]

Hello,

We want to develop a Smart on FHIR provider app and have questions about the publishing and update process after a successful review. In the checklist for reviewing an app (https://code.cerner.com/submit), the last item is "Developed a working application demo, integrating directly with Cerner’s open sandbox".

Regarding hosting the app:

When registering a Smart on FHIR app in the sandbox, any domain not under control of Cerner can be used for the launch URI (e.g., example-domain.com/my-smart-on-fhir-app).

We were wondering how this would be handled after a successful review. Does the web app stay hosted in the same location or will it be hosted by Cerner?

If the app is still hosted by the developer, how does Cerner ensure that once the review is complete, the developer does not make any unauthorized changes?

 

Regarding updates:

How does the process work if one wants to release an update to the app after a few months? We assume that these changes have to go through a new review again? Will this review be performed in a development environment and once the updated app is accepted, the code can be deployed to the production environment?

 

Additional question regarding the review:

Is there somewhere a list of actions that are allowed/forbidden in a Smart on FHIR app?

We want to display a filtered list of devices and for each device display an external URL that contains the device UDI (e.g. "external-website.com/{device-UDI}"). Would such a use case be allowed?

 

We couldn't find any documents that explain these details. If you could answer these questions or provide links where we can find this information, we would be very thankful!

[Fenil Desani (Cerner)]

Hello,

The App would always be hosted on your domain/servers.

Any major functionality changes needs re-validation from Cerner.

Please provide more details about 'list of actions that are allowed/forbidden in a Smart on FHIR app' quetion.

Thanks,

Fenil

[Developer HTK]

Hello Fenil,

Thanks for your reply!

 

"The App would always be hosted on your domain/servers. Any major functionality changes needs re-validation from Cerner."

Will this review be performed in a development environment and once the updated app is accepted, the code can be deployed to the production environment?

 

"Please provide more details about 'list of actions that are allowed/forbidden in a Smart on FHIR app' quetion."

We have one specific use case in mind: We want to display a filtered list of devices and for each device display an external URL that contains the device UDI (e.g. "external-website.com/{device-UDI}"). Would such a use case be allowed?

This is the main use case we are interested in. But we would also be interested to know more about the review rules in general. Is there somewhere a list with practices that lead to a rejection during the Cerner review?

Thanks and best regards,

Marc

[Fenil Desani (Cerner)]

Will this review be performed in a development environment and once the updated app is accepted, the code can be deployed to the production environment? - Correct

We have one specific use case in mind: We want to display a filtered list of devices and for each device display an external URL that contains the device UDI (e.g. "external-website.com/{device-UDI}"). Would such a use case be allowed? - Yes. Not sure how would you get the list of devices, but yes, you can launch external URI from your App. Again, this maybe subject to more scrutiny/discussion once you part of the CODE program.