Redox is a healthcare data interoperability platform that enables real-time exchange of clinical and administrative data across EHRs, providers, payers, and digital health systems through a single standardized API. An unofficial API lets you programmatically pull patients, encounters, appointments, clinical results, medications, and documents—and push updates like new orders, scheduling changes, and care-coordination events—across the EHRs and clinical networks Redox connects, including Carequality, TEFCA-CommonWell, FHIR, and Data Model surfaces.

Redox is a healthcare data interoperability platform that enables real-time exchange of clinical and administrative data across EHRs, providers, payers, and digital health systems. Customers use Redox to connect to 100+ EHR systems through a single standardized API, normalizing data across both a proprietary JSON Data Model and a FHIR REST interface, and to reach clinical networks such as Carequality and TEFCA-CommonWell—powering thousands of live integrations across the healthcare ecosystem.
Core product areas include:
Common data entities:
Health systems and digital health vendors run mission-critical workflows through Redox, but turning connection- and configuration-driven exchange into API-driven automation is non-trivial:
Supergood reverse-engineers authenticated flows, the Redox FHIR API, the Data Model API, and webhook delivery to deliver a resilient API layer for your Redox organization—across every EHR connection and clinical network onramp you operate.
Use Redox with AI agents: Redox MCP Server →
Book a 30-minute session to confirm your EHR connections, data models, and authentication model.
We deliver a production-ready Redox adapter tailored to your organization's connections and entitlements.
Go live with continuous monitoring and automatic adjustments as Redox evolves.
Authentication
/authenticateAuthenticate to a Redox organization using OAuth 2.0 with a JWT assertion and obtain an access token for downstream calls.
Patient Operations
/patientsSearch and retrieve patient demographics and identifiers across connected EHRs via the FHIR API or Data Model API.
Scheduling
/appointmentsList appointments and scheduling data, including admissions, discharges, and transfers, with filters for patient, provider, and date range.
Scheduling
/create_appointmentCreate or update a scheduling event against a connected destination using the configured data model.
Clinical
/encountersRetrieve encounters, clinical results, vitals, medications, and transition-of-care summaries for a patient.
Clinical
/submit_orderSubmit clinical or lab orders and patient-monitoring instructions to a connected EHR destination.
- Pull patient demographics, encounters, and clinical results from connected EHRs into a single warehouse - Stream lab results, vitals, and medication data to downstream analytics and care-coordination tools - Reconcile patient identifiers across the FHIR API and Data Model API for a unified record
- Pull appointments, admissions, discharges, and transfers to drive real-time throughput dashboards - Push scheduling updates and new appointments back to connected destinations without portal clicks - Trigger discharge-coordination and follow-up workflows from ADT events
- Retrieve clinical summaries, notes, and document attachments for automated triage and routing - Normalize transition-of-care plans across connections for downstream registries and care teams - Submit structured data and AI outputs back into the EHR via the appropriate data model
- Query Carequality and TEFCA-CommonWell onramps for patient records beyond direct connections - Normalize retrieved records into consistent patient, encounter, and result objects - Surface gaps and matched records to care-coordination and HEDIS reporting workflows
Authentication
OAuth 2.0 with JWT assertions, key rotation, and legacy-to-new auth migration handled in a managed session
Connectivity
Redox FHIR API, Data Model API, Platform API, and webhook delivery surfaced across your EHR connections
Response format
Normalized JSON across patient, encounter, result, medication, and document objects from both FHIR and Data Model surfaces
Rate limits
Adaptive throttling tuned to your organization and per-connection limits to avoid downstream EHR rejection
Session management
Automatic token refresh, JWT re-signing, and credential rotation
Data freshness
Near real-time pulls for patient, encounter, and result data plus webhook-driven push delivery, with optional scheduled batch syncs
Security
HIPAA-aligned controls, encrypted credential vault, scoped access tokens, minimum-necessary access, and audit logging
Webhooks
Subscription, replay, and deduplication for pushed clinical messages and ADT, result, and document events
Latency
Sub-second reads on cached entities; multi-second responses when querying clinical networks or posting orders
Throughput
Horizontally scaled workers sized to multi-connection clinical message volume
Reliability
Retry, backoff, and idempotency keys for order submission, scheduling, and document delivery
Adaptation
Continuous monitoring of Redox releases, data-model changes, and per-connection configuration drift
Yes. Supergood normalizes data across both the Redox FHIR API and the proprietary Data Model API, so you integrate patient, encounter, result, and document entities once regardless of which surface a given connection uses.
No. Supergood works with your existing Redox organization, sources, and destinations. New connections are only required when you want to reach an EHR or network you have not yet onboarded.
Supergood manages OAuth 2.0 with JWT assertions, including key rotation and the migration from legacy API keys to the newer JWT-based authentication, so your automation stays connected without manual token handling.
Yes. Where your organization is provisioned for the clinical network onramps, Supergood queries Carequality and TEFCA-CommonWell and normalizes retrieved records into the same patient, encounter, and result objects as your direct connections.
Clinical data is exchanged under HIPAA-aligned controls with encrypted credentials, scoped tokens, minimum-necessary access, and full audit logging on every call.