Blog
Guides and articles from MedScrub.
Eight Step Cerner FHIR Integration Checklist for Developers
Developer playbook for Cerner FHIR integration: check server metadata, implement SMART or JWT OAuth, run bulk exports, and keep PHI local.
Pass OCR: 5 Steps to HIPAA Threat Modeling for Security Teams
A compliance-first playbook for security and compliance teams. Map e-PHI with DFDs, run STRIDE or PASTA, require SBOMs, and produce OCR-ready risk...
Developers: validate API first for Cerner sandbox setup
For developers: get a Cerner sandbox working by validating the FHIR API first, then register exact scopes and redirect URI, and finally confirm token...
Keep PHI Local: Four Rs for Prompt Engineering in Clinical Practice
Clinicians get practical prompt templates and the Four Rs to speed documentation, keep PHI on device, and meet FDA and WHO guidance with auditable AI...
Privacy First Clinical Documentation Automation for Health Systems
Health system guide to ambient AI scribes and privacy first on device clinical documentation automation. Pilot steps, QA metrics, and MedScrub case studies.
Verify AI Chart Summaries After 147 EHR Reviews for Clinicians
Clinician safety guide to AI chart summarization: EHR evaluation data, verification workflows, prompt schemas, and on device privacy.
Save About 2 Hours Per Clinician With EMR Problem Based Summaries
Clinics: adopt an EMR-integrated, evidence-backed approach to problem based summaries. Get a practical rollout checklist, governance steps, and Monarch's...
Clinicians & Students: Problem Oriented Medical Record With MedScrub
Practical POMR guide for clinicians and students: Weed's four components, SOAP examples, EHR templates, and MedScrub workflows.
IT Teams: Right Size On Prem LLMs to Hit Under 50 ms Latency
An ops-first playbook for IT teams to right-size on prem LLM deployment. Covers VRAM math, runtime choices, gateway-first operations, hybrid staging, and...
Pass HIPAA Audits: Remove 18 Safe Harbor Identifiers On Device
Operational guidance for compliance teams: remove all 18 Safe Harbor identifiers, detect IDs in clinical notes, document reviews for auditors, and use...
Clinics: Pilot a Clinical AI Chatbot in 30–90 Days and Keep PHI Local
Compliance first clinician guide to piloting EMR integrated clinical AI chatbots that keep PHI local. Checklist and MedScrub case.
Only 17 of 157 Healthcare RAG Studies Tested Workflows for Clinicians
Practical, evaluation first roadmap for clinicians deploying healthcare RAG: layer-specific tests, PHI safe indexing, shadow pilots, and runtime monitoring.
Keep PHI Local: Secure EMR Note Sharing for Clinical Teams
Practical, audit-ready steps for clinicians and IT to share EMR notes securely using FHIR/SMART, on device de-identification, BAAs, and QA pipelines.
Deidentification Vs Anonymization: 4 Audit Docs Privacy Teams Skip
Close the GDPR and HIPAA gap. See the four audit documents, tests, and on device transforms privacy teams must log to prove anonymization across...
Default to id only: FHIR Subscriptions for Implementers Protecting PHI
Practical FHIR subscriptions reference for implementers. Learn to default to id only, handle handshakes, reconcile missed events, and keep PHI off...
Healthcare Teams: PHI Deidentification, 18 Identifiers, QA & On Device
Practical PHI deidentification for healthcare teams: remove the 18 Safe Harbor identifiers, run QA and sample re identification tests, log...
FHIR vs HL7: 5 Interface Scenarios and the Standard to Use
Decide per interface whether to use FHIR or HL7 v2. See five common scenarios, migration patterns, and what teams must prepare before FHIR goes to production.
Cut AI Hallucinations 70–80% for Healthcare Developers with RAG
Deployment-ready guidance for developers in regulated domains: start with RAG and a citation contract, add detectors and HALO oversight, then scale to...
Ship a SMART on FHIR App with Discovery and PKCE for Developers
Developer-first SMART on FHIR tutorial that walks through discovery, the correct PKCE OAuth flow, and sandbox-first testing to get a minimal browser app...
Clinicians: Save Two Hours a Day With Privacy First AI Scribes
Evidence-backed guidance for clinicians on medical scribe AI. Learn how on-device PHI protection, workflow changes, and vendor questions can cut charting...
Save Two Hours: HIPAA Safe On Device AI SOAP Notes for Clinicians
A clinician first guide to safe AI SOAP notes. Learn peer reviewed risks, HIPAA safe on device options, verification steps, and a four week pilot plan.
Clinics: Governance First Clinical Workflow Automation and PHI Safety
Governance first roadmap for clinics to deploy clinical workflow automation. Includes a technical checklist, a 90 day pilot plan, and on device PHI...
HIPAA Compliant AI: 3 Controls Clinicians and Developers Must Verify
Practical, implementation-first checklist for clinicians and AI engineers. Verify the three controls—BAA, encryption and key management, and...
Developers: 3 Rules for Epic FHIR Integration, TEFCA/IAS and MedScrub
Developer Epic FHIR playbook: sandbox to production, /metadata checks, SMART on FHIR, TEFCA/IAS flows, Vendor Test, and a MedScrub case study.
Reliable FHIR Bulk Export: NDJSON, Polling, Token Tips for Developers
Developer-first FHIR bulk export guide with NDJSON streaming, robust polling, and token handling. Practical engineering tips plus a privacy-first...
8–12 Week Clinic Pilot: EMR Integrated Prior Authorization Automation
Clinic EMR checklist to pilot prior authorization automation: unified prospective and retrospective queue, on device PHI, KPIs, 8–12 week test.