Sources
Each source identity links to one stable row. Registration records what was inspected; it does not make a source’s every statement correct or applicable to Defence. The initial sources were retrieved on 14 October 2026; the broader public-source expansion was checked on 16 October 2026. Each addition records its own source and retrieval dates.
The three transcripts establish design intent and research leads. Their original bytes and SHA-256 hashes are preserved in the unrendered sources/seed/ boundary and sources/seed-register.json. Public sources are retained as links, metadata and bounded paraphrases, not wholesale copies. Full rights/retention metadata is in sources/register.json.
| ID | Authority and source | Date or version | Evidence role and limits |
|---|---|---|---|
| SRC-001 | NHS–Defence primary record conversation | Captured 2026-10-14 | Project intent and unverified research leads; raw bytes retained locally; citation tokens are not source URLs. |
| SRC-002 | GP record primacy and information flows conversation | Captured 2026-10-14 | Project intent and unverified research leads; raw bytes retained locally; citation tokens are not source URLs. |
| SRC-003 | Defence Shared Care Record conversation | Captured 2026-10-14 | Project intent and unverified research leads; raw bytes retained locally; citation tokens are not source URLs. |
| SRC-004 | NHS England, Records Management Code of Practice, Appendix III, General practitioner records | page last edited 20 May 2026. | verified current published guidance; England scope. |
| SRC-005 | NHS England, The national context for digital primary care | published 1 May 2023; last updated 7 April 2025; version 2.2 dated 28 March 2025. | verified official search-index text; direct open returned a JavaScript challenge. |
| SRC-006 | NHS England Digital, GP registration digital guide | last edited 23 January 2026. | verified published technical guide; explicitly describes England registrations. |
| SRC-007 | NHS England Digital, GP2GP | last edited 2 October 2026. | verified live-service description; England-to-England scope. |
| SRC-008 | Primary Care Support England, Digitised medical records | no publication/update date displayed; retrieved 14 October 2026. | verified currently published operational help, delivered for NHS England by Capita; undated. |
| SRC-009 | NHS, Step-by-step guide for service leavers | last reviewed 5 June 2024; next review due 5 June 2027. | verified published patient guidance; dates predate S8/S9 programme announcements. |
| SRC-010 | NHS England, Primary medical services policy and guidance manual, section 4.16 | published 5 September 2025; updated 14 January 2026; document labels current version 6, August 2025. | verified official search-index content; direct page open challenged JavaScript. Statutory text not independently checked in this workstream. |
| SRC-011 | UK Parliament, written question HL14105, answered by MOD | answered 12 February 2026. | Verified historical ministerial announcement; the timetable is qualified by project update 030 and is not a reliable current planning baseline. |
| SRC-012 | Defence Primary Healthcare Patient Privacy Notice, page 1 and page 7 | PDF has no visible revision date; landing history says DPHC notice added 7 August 2018; landing last updated 24 March 2025, which concerns the MOD notice and must not be misrepresented as the PDF revision date. | verified currently linked official notice, expressly applying to personal data processed by or for DPHC. |
| SRC-013 | MOD, Defence Medical Services group page | no update date displayed; retrieved 14 October 2026. | verified current organisation page. |
| SRC-014 | CQC DMS annual report 2024/25, Defence Community Mental Health Services | published and updated 17 July 2025. | verified official indexed text; direct open returned 403. |
| SRC-015 | The National Health Service (General Medical Services Contracts) Regulations 2015 — regulation 67 | 2015; current revised text retrieved 2026-10-14 | Verified via official /data.html endpoint. Reg67(1)-(2): adequate records and inclusion of clinical reports; revised system and transfer requirements. Applies to GMS contractors, not automatically MOD. |
| SRC-016 | The National Health Service (General Medical Services Contracts) Regulations 2015 — Schedule 3 paragraph 12 | 2015; current revised text retrieved 2026-10-14 | Verified via official /data.html endpoint. Non-private services to patients outside contractor list require clinical report via NHS England; explicit out-of-hours exception. |
| SRC-017 | 2026/27 NHS Standard Contract — Service Conditions (Full Length) | Version 1, January 2026; effective from 2026-04-01 | SC11.3-.7, SC12.1-.2; printed pages 23-26. Service-category qualifications matter. Current contract source. |
| SRC-018 | 2026/27 NHS Standard Contract — General Conditions (Full Length) | Version 1, January 2026; effective from 2026-04-01 | URL misleadingly contains 2526 but current landing page links it and document title is 2026/27. Transfer of Care definition printed p83; discharge summary p55. |
| SRC-019 | National elective access policy | Published 2025-02-05; updated 2025-02-11; review due February 2026 | Sections 4.9/4.10 separate straight-to-test and direct-access diagnostics. Review date overdue at retrieval; published evidence, not a complete liability framework. |
| SRC-020 | Guidance on patient digital notification of diagnostic imaging reports | Published 2025-03-20; updated 2025-03-21 | Referrer responsible for review/action/communication; automatic patient release additional failsafe, not replacement. PRN01543. |
| SRC-021 | Clinical messaging and test results | Published 2023-07-27; webpage updated 2026-02-17; body Version 1.2 dated 2025-03-26 | GPGv5 guidance. Tracks requested/outstanding results, review/action, absence cover, failures and continuity. Preserve differing page/body dates. |
| SRC-022 | GP Connect Access Record | Last edited 2026-09-03 14:21 | No new supplier onboarding for Structured, page under review; HTML/Structured/Documents differ; exclusions and consumer IG/safety requirements. |
| SRC-023 | GP Connect | Last edited 2026-09-01 13:11 | No new-developer onboarding via GP Connect for Update Record, Send Document, Appointment Management; existing suppliers can onboard users. Not service closure. |
| SRC-024 | GP Connect Update Record: Frequently asked questions | Published 2024-07-18; updated 2025-11-03 | Assured community pharmacy services only; workflow and optional auto-filing, rejected updates not notified, urgent actions direct; clinical/controller responsibilities. |
| SRC-025 | GP Connect: Update Record | Last edited 2025-10-22 16:18 | FHIR STU3/ITK3/MESH; approved community pharmacy use. Older onboarding invitation conflicts with Sep2026 overview; current route requires confirmation. |
| SRC-026 | Develop GP Connect services | Last edited 2026-08-06 10:55 | Assured systems, agreements, NDSA, SCAL, local intended-use clinical safety. Direct care plus specified medical-examiner exception. |
| SRC-027 | National Data Sharing Arrangement for GP Connect | Last edited 2026-09-03 13:04 | Agreed-use supplier route; DSPT/ODS code, NDSA/AUP, transparency/training/audit; local shared-care governance; not blanket Defence permission. |
| SRC-028 | National Data Guardian 2023–2024 report | Published 2024-12-05 | Section 6.7.3: MOD pre-employment fitness-to-serve GP Connect use not supported even with explicit consent; outside direct care. Specific dated advice, not universal MOD ban. |
| SRC-029 | Responsibility for prescribing between primary and secondary/tertiary care | Version 2, 2018 | Sections 2.3-2.8 printed p14: patient-specific shared care, GP agreement, continuing specialist prescriptions until transfer, defined responsibilities. Older guidance; confirm current pathway. |
| SRC-030 | Project owner update: Defence rollout timetable | 2026-10-14 | Project-provided update: formal 2027 announcement acknowledged; timetable remains under review; it is not yet confirmed that rollout will proceed as announced. This is the owner’s latest clarification. No revised public date verified. |
| SRC-031 | What are controllers and processors? | Updated 2023-09-29; under review following Data (Use and Access) Act | Directly read official guidance; roles depend on processing, not record ownership shorthand. |
| SRC-032 | Information Governance Framework: Shared Care Records — Requirements | Current published chapter; retrieval date below | Directly read sections 3.2–3.4; England shared-care framework, reference for Defence design rather than automatic proof of applicability. |
| SRC-033 | Disclosing information for employment, insurance and similar purposes | Current professional guidance; retrieval date below | Directly read professional standards; dual obligations explicitly include Armed Forces; not a complete Defence-specific legal analysis. |
| SRC-034 | Health and Social Care Act 2012 — section 251B | Current revised text retrieved 2026-10-14 | Read official /data.html. Conditional duty to share; does not override data-protection duties or common-law duties of care/confidence. |
| SRC-035 | Health and Social Care Act 2012 — section 251C | Current revised text; displayed amendment effective 2025-07-07 | Read official /data.html. Definitions and scope qualify section 251B; assess particular Defence processing rather than assume direct application or exemption. |
| SRC-036 | Project scope update: civilian history and military medicine | 2026-10-14 | Owner request to expand the governing question through research; local source note retained. Design intent, not proof of capability. |
| SRC-037 | NHS, Accessing NHS healthcare while in active service | Reviewed 20 August 2024; next review due 20 August 2027 | Directly read guidance on temporary NHS registration and information returning to DMS during service. Distinct from authorised dual registration or universal shared access. |
| SRC-038 | UK Parliament, written question 105192, answered by DHSC | Answered 19 January 2026 | Full Defence Health Record on NHS GP request; electronic interoperability described as work in progress. Dated statement, not evidence of completed integration. |
| SRC-039 | MOD, Medical Operating Concept (First Edition) | Published 23 November 2022; PDF updated 16 January 2023 | Selected sections 3.2, 3.22 and 6.4d, printed pp20, 33, 48. Forward concept through 2030; digitised pathways and degraded operation are direction, not delivered capability. |
| SRC-040 | RAF, Medical Officer: role and specialist training | Undated; retrieved 14 October 2026 | Directly read aviation/occupational medicine training description. Scope evidence, not detailed fitness standards, a complete organisation map or access policy. |
| SRC-041 | Royal Navy, Occupational Medicine & Health Science – Standard UW Medicine Course | Undated; retrieved 14 October 2026 | Directly read diving/submarine medicine course description. Relevant clinical context, not the standards themselves or a legal basis for access. |
| SRC-042 | The Metropolitan Museum of Art, Tally in the shape of a tiger (Hu fu) | Undated collection record, object 18.43.7; retrieved 16 October 2026 | Directly read museum explanation of complementary bronze tally halves used to verify troop-deployment orders. Supports historical function, not the date, material or provenance of the owner-provided image's specific object. |
| SRC-043 | Information Commission / ICO, ICO, A guide to lawful basis | Updated 2 April 2026; retrieved 16 October 2026 | Directly read current regulator guidance updated for the Data (Use and Access) Act; seven bases including recognised legitimate interest; excludes public authorities performing official tasks from that basis. |
| SRC-044 | Information Commission / ICO, ICO, What are the conditions for processing special category data? | Last published 18 December 2023; current page carries DUAA review notice; retrieved 16 October 2026 | Directly read; Article 9 conditions and secrecy safeguards. Under review following the Data (Use and Access) Act; read alongside amended legislation, not as evidence all reforms remain pending. |
| SRC-045 | UK legislation, Data Protection Act 2018, Schedule 1 | Revised legislation as retrieved 16 October 2026; retrieved 16 October 2026 | Direct official XML read after HTML retrieval failure. Paragraph 2 health/social-care condition; paragraph 39 appropriate-policy-document provisions are condition-dependent. Exact flow applicability remains to be assessed. |
| SRC-046 | General Medical Council, GMC, Using and disclosing patient information for direct care | Current published professional guidance; retrieved 16 October 2026; retrieved 16 October 2026 | Directly read paragraphs 26–49 and supporting definitions; implied consent conditions and objections concern confidentiality, not interchangeable UK GDPR consent. |
| SRC-047 | UK legislation, National Health Service Act 2006, section 251 | Revised legislation as retrieved 16 October 2026; retrieved 16 October 2026 | Direct official XML read after HTML retrieval failure. Regulation-making power, confidentiality and definitions; does not disapply data-protection requirements. Distinct from HSC Act 2012 section 251B. |
| SRC-048 | Health Research Authority, HRA, Guidance for CAG applicants | Current applicant guidance; retrieved 16 October 2026; retrieved 16 October 2026 | Direct HTML read using HTTP client after intermittent web-tool timeouts. England and Wales route for confidential information without consent; support is not a right of access or a substitute for controller decisions. |
| SRC-049 | NHS England, NHS England, Understanding the national data opt-out | Current published service guidance; retrieved 16 October 2026; retrieved 16 October 2026 | Directly read; England scope, individual-care exclusion and specific conditions/exceptions. Not a universal sharing veto or blanket statement of MOD applicability. |
| SRC-050 | Information Commission / ICO, ICO, Data sharing agreements | Current published guidance; DUAA review notice; retrieved 16 October 2026 | Directly read; agreements support accountability and are good practice but do not create legal powers. Specific Article 26 and 28 obligations remain distinct. |
| SRC-051 | Information Commission / ICO, ICO, When do we need to do a DPIA? | Current published guidance; DUAA review notice; retrieved 16 October 2026 | Directly read; Article 35 high-risk screening and large-scale special-category trigger. Not a completed DPIA for COPPER TIGER. |
| SRC-052 | NHS England, NHS England, Records Management Code of Practice, section 5: Management of records when the minimum retention period is reached | Live code webpage retrieved 16 October 2026; retrieved 16 October 2026 | Directly read; appraisal, legal holds, documented continued retention and destruction. England reference, not an established MOD retention schedule; no universal retention duration inferred. |
| SRC-053 | Information Commission / ICO, ICO, A guide to individual rights | Guide restructured 19 May 2023; current page retrieved 16 October 2026; retrieved 16 October 2026 | Directly read rights overview; detailed conditions and current legislative exceptions must be checked for each request. |
| SRC-054 | UK Government, DSIT / DBIST, Data Use and Access Act 2025: plans for commencement | Published 25 July 2025; updated 12 October 2026; retrieved 16 October 2026 | Directly read Stage 3 and Stage 4 summaries: majority of Part 5 commenced 5 February 2026; regulator transfer 30 September 2026. Initial projected dates elsewhere on page must not override later commencement account. |
| SRC-055 | National Data Guardian, The Caldicott Principles | Published 8 December 2020; retrieved 16 October 2026 | Directly read eight principles. Page states England scope; principles guide confidentiality practice and do not create a substitute legal basis. |
| SRC-056 | Scottish Government, Scottish Government, Health and social care: data strategy — Supporting Research and Innovation | Published 22 February 2023; retrieved 16 October 2026 | Directly read description of HSC-PBPP and non-direct-care scrutiny. Dated strategy used for jurisdictional distinction, not as verification of every current application route or future programme delivery. |
| SRC-057 | HSC Privacy Advisory Committee, Northern Ireland, HSC Privacy Advisory Committee NI, Reference Documents | Page describes code reviews in 2012 and late 2018; retrieved 16 October 2026; retrieved 16 October 2026 | Directly read official index. Establishes separate NI confidentiality guidance; older code does not establish post-DUAA legal completeness or current Defence mechanisms. |
| SRC-058 | Wales Accord on the Sharing of Personal Information, WASPI, Framework documentation | Current framework page retrieved 16 October 2026; retrieved 16 October 2026 | Direct HTTP read after web-tool timeout. Distinguishes sharing protocols, disclosure agreements, joint-controller agreements and processor/subprocessor contracts. Framework does not itself create statutory disclosure power. |
| SRC-059 | UK legislation, UK General Data Protection Regulation, revised text | Revised legislation as retrieved 16 October 2026; retrieved 16 October 2026 | Direct official XML read of Articles 4, 6, 9, 16, 17, 20, 26 and 28. Includes 2026 amendments; use current provision and applicable conditions rather than original EU text or a generic GDPR label. |
| SRC-060 | NHS England / original PRSB where identified, NHS England, Clinical Referral Information Standard | Directory last updated 30 March 2026; publication version 1.0.0.; retrieved 16 October 2026 | Active; UK-wide primary-to-secondary referral content. NHS England management from 1 January 2026. PRSB page also checked: model v1.0. Content standard does not determine route or accepted clinical responsibility. |
| SRC-061 | NHS England / original PRSB where identified, NHS England, Outpatient Letter Standard | Directory last updated 30 March 2026; linked v2.2 release notes published April 2023.; retrieved 16 October 2026 | Active. Directory, linked release-notes PDF and PRSB page checked. Model v2.2 differs from technical Transfer of Care release. Scope exclusions retained. NHS England management from 1 January 2026. |
| SRC-062 | NHS England / original PRSB where identified, NHS England, DAPB4042 Transfer of Care — Acute Inpatient Discharge Standard | Published 3 February 2022; effective 1 April 2022; directory last updated 30 March 2026.; retrieved 16 October 2026 | DAPB4042 Amd 75/2021, directory publication version 1.0.0, active. Underlying PRSB eDischarge model 2.1, terminology, FHIR and MESH are distinct layers. Defined NHS provider scope; no general Defence mandate inferred. |
| SRC-063 | NHS England / original PRSB where identified, NHS England, Emergency Care Discharge Standard | Directory last updated 30 March 2026; publication version 2.2.0.; retrieved 16 October 2026 | Active. Type 1/2/3 emergency unit discharge; excludes inpatient, mental health inpatient, inter-hospital transfers and outpatient/community discharge. Does not establish local implementation. |
| SRC-064 | NHS England / original PRSB where identified, NHS England, Mental Health Inpatient Discharge Standard | Directory last updated 30 March 2026; linked PRSB page identifies model v2.1.; retrieved 16 October 2026 | Active; adult inpatient mental health discharge. Directory read directly; linked PRSB page retrieved by ordinary HTTPS after browser fetch timeout and confirms current-release v2.1. Outpatient and inter-hospital transfers outside stated scope. |
| SRC-065 | NHS England / original PRSB where identified, NHS England, Transfer of Care message specification versions | Last edited 19 May 2026; listed live releases dated 30 July 2021.; retrieved 16 October 2026 | Current live table lists acute inpatient, emergency, mental health and outpatient 2.9.0-live, all FHIR STU3. Previous versions table separately retained. Technical profile release is not content model version or evidence of all-provider deployment. |
| SRC-066 | NHS England / original PRSB where identified, NHS England, Joint guidance on the NHS e-Referral Service | Last edited 27 February 2025; gateway reference 08730.; retrieved 16 October 2026 | Referral, triage, advice and guidance and worklist responsibilities. Older authentication text not used; current service description is SRC-071. Advice response differs from referral acceptance. |
| SRC-067 | NHS England / original PRSB where identified, NHS England, 111 Referral Standard | Directory last updated 2 July 2026; publication version 1.0.0.; retrieved 16 October 2026 | Active, UK-wide content scope for 111/999 onward referrals plus GP post-event message. PEM information differs from referral action. Excludes inter-111 and 111-to-999 transfers. Content scope does not prove BaRS implementation availability. |
| SRC-068 | NHS England / original PRSB where identified, NHS England, Community Pharmacy Information Standard | DAPB4008 5/2023; published 26 June 2023; effective 1 July 2023; directory updated 30 March 2026.; retrieved 16 October 2026 | Active. Defines recording and GP communication by pharmacy service. Directory retains historic CPCS terminology/routing text; use current service-specific implementation sources for actual delivery. Does not confer arbitrary GP record write access. |
| SRC-069 | NHS England / original PRSB where identified, NHS England, Pathology and Laboratory Medicine Reporting — FHIR API | Catalogue last edited 7 October 2026; linked OpenAPI description version 0.1.0.; retrieved 16 October 2026 | Catalogue and linked /restapi/oas/pathology-laboratory-reporting read directly. FHIR R4 REST route using Patient Data Manager and Multicast Notification Service. API in development/private beta; invitation-only onboarding; service level TBC. Does not prove legacy EDIFACT cessation or Defence eligibility. |
| SRC-070 | NHS England / original PRSB where identified, PRSB, Outpatient Letter Standard maintenance-release implementation guidance | Maintenance guidance for 2017 outpatient standard; no reliable publication date on retrieved cover.; retrieved 16 October 2026 | 17-page PDF linked by current NHS Standards Directory. Sections 4.9.16–4.9.23 distinguish medicines reconciliation, GP prescriber authorisation and dose/product prescribing. Historical guidance not proof of current automation or universal route. |
| SRC-071 | NHS England / original PRSB where identified, NHS England, NHS e-Referral Service | Last edited 15 October 2026.; retrieved 16 October 2026 | Official current platform description; lists Defence medical services among using care settings. Describes booking, triage, advice, Directory of Services and CIS2. No inference that every Defence unit or correspondence flow uses e-RS. |
| SRC-075 | Official primary publisher, NHS England Digital, Primary Care Registration Management | Last edited 24 August 2026.; retrieved 16 October 2026 | Direct page read. Explicit DMS participation in PCRM; does not establish a Defence GP2GP clinical-record transfer interface. |
| SRC-076 | Official primary publisher, CQC, Stonehouse Combined Medical Practice inspection report, referral management (page 13) | Published 25 February 2025.; retrieved 16 October 2026 | Official indexed report passage verified; direct PDF retrieval returned HTTP 403. Local observed e-RS, email, internal DMICP rehabilitation referral and referral tracking; no estate-wide interface claim. |
| SRC-077 | Official primary publisher, CQC, Marham Combined Medical Practice inspection report, information to deliver safe care (page 12) | Published 23 May 2025.; retrieved 16 October 2026 | Official indexed report passage verified; direct PDF retrieval returned HTTP 403. Local DMICP test requests, Path Links results and paper outage workflow; technical protocols not specified. |
| SRC-078 | Official primary publisher, CQC, Mount Pleasant Medical Centre inspection report, information to deliver safe care (page 8) | Published 5 June 2025; follow-up inspection 7 May 2025.; retrieved 16 October 2026 | Direct official PDF text read. Local DMICP(D), clinical tasking and specialist communications; bounded inspection evidence, not current estate-wide architecture. |
| SRC-079 | Official primary publisher, MOD, UK service personnel medical discharges: background quality report 2026 | Updated 9 July 2026.; retrieved 16 October 2026 | Direct page read, sections 2, 3.1–3.5 and 6.1. Distinguishes DMICP clinical/analytical roles, FMed23 medical-board records, JPA administration and a bounded statistical coding process. |
| SRC-080 | Official primary publisher, Digital Health and Care Wales, Medicines Transcribing and E-Discharge | No publication/update date displayed; retrieved 16 October 2026.; retrieved 16 October 2026 | Direct page read. Describes MTeD within Welsh Clinical Portal and hospital-to-GP discharge communication; does not establish Defence connectivity or current complete rollout. |
| SRC-081 | Official primary publisher, Scottish Government, NHSScotland national access policy, section 5 Responsibilities | Published 11 December 2023.; retrieved 16 October 2026 | Direct page read. Referral information includes CHI and applicable Armed Forces/veteran status; movement retains relative pathway position within national waiting-time targets. |
| SRC-082 | Official primary publisher, Digital Health and Care Wales, Primary care | No publication/update date displayed; retrieved 16 October 2026.; retrieved 16 October 2026 | Direct page read. Welsh primary-care tools include GP2GP between Welsh practices and Welsh Clinical Communications Gateway referrals; no Defence endpoint established. |
| SRC-083 | Official primary publisher, Department of Health Northern Ireland, A new era in Northern Ireland's health service as all Trusts Go-Live on encompass | Published 8 May 2025.; retrieved 16 October 2026 | Direct page read. Reports rollout completion across five HSC Trusts; not proof of Defence access or universal GP-record integration. |
| SRC-084 | Official primary publisher, NHS Education for Scotland, Digital Dermatology Essential Learning Resources | No publication/update date displayed; retrieved 16 October 2026.; retrieved 16 October 2026 | Direct page read. Describes attaching clinical images to SCI Gateway referrals and separate Docman storage guidance; a specific workflow, not a Defence interface. |
| SRC-085 | Official primary publisher, NHS England Digital, Guidance for sending secure email, Defence Primary Healthcare section | Last edited 26 July 2022.; retrieved 16 October 2026 | Direct page read after redirect from NHSmail URL. Explicit mod.gov.uk secure-domain guidance for healthcare correspondence from NHSmail; not permission for all disclosures or proof of recipient workflow. |
| SRC-086 | Official primary publisher, NHS England Digital, The secure email standard | Last edited 9 October 2026; displayed accredited-domain list also updated 9 October 2026.; retrieved 16 October 2026 | Direct page read. DCB1596 configuration and organisational requirements; accreditation lasts one calendar year. Check current service status when implementing. |
| SRC-090 | NHS England, Interoperability Toolkit 2 Messaging API standards | Last edited 16 April 2026; retrieved 16 October 2026 | Directly read catalogue: HL7 v2/v3 and ADT examples; ITK2 marked deprecated. Does not retire all HL7 v2 interfaces or prove Defence implementation. |
| SRC-091 | NHS England, Interoperability Toolkit 3 Messaging Distribution FHIR API standards | Last edited 16 April 2026; retrieved 16 October 2026 | Directly read active catalogue; STU3 components over MESH, payload not specified by this layer; live 2.10.0 and 2.9.0 response-code versions depend on programme. |
| SRC-092 | NHS England, Message Exchange for Social Care and Health | Last edited 16 October 2026; retrieved 16 October 2026 | Directly read service page: asynchronous files/messages, retrieval acknowledgement, delivery tracking, workflow IDs and five-day non-delivery report. Transport evidence is not clinical review. |
| SRC-093 | HL7 International; hosted by HL7 Europe, HL7 Version 2.5.1, Chapter 3: Patient Administration | Version 2.5.1; fixed reference edition; retrieved 16 October 2026 | Directly read selected event and segment definitions, including A01/A02/A03/A04/A08/cancellations/A40, PID, PV1, EVN and MRG. Version-specific educational reference, not a universal NHS or Defence profile. |
| SRC-094 | HL7 International; hosted by HL7 Europe, HL7 Version 2.5.1, Chapter 2: Control | Version 2.5.1; fixed reference edition; retrieved 16 October 2026 | Directly read message control fields, response correlation, original/enhanced acknowledgements and conformance profiles. No assertion of clinical acceptance or deployed transport. |
| SRC-095 | HL7 International, FHIR Release 4: Documents | FHIR R4 v4.0.1, 2019; retrieved 16 October 2026 | Directly read document Bundle/Composition structure and immutable assembled-document identity. R4 illustration does not supersede STU3 route specifications. |
| SRC-096 | NHS England, Personal Demographics Service | Last edited 15 October 2026; retrieved 16 October 2026 | Directly read demographic, identifier and registered-GP scope for England, Wales and Isle of Man; authorised access and data-quality services. Not a store of clinical history. |
| SRC-097 | NHS England, Organisation Data Service | Last edited 15 October 2026; retrieved 16 October 2026 | Directly read organisation/site identifiers and live service. ODS identity is distinct from the clinical routing and acceptance contract. |
| SRC-098 | NHS England, UK Core FHIR Release 4 — Governance | DAPB4020 Amd 33/2021; published 11 March 2022; page updated 1 December 2025; retrieved 16 October 2026 | Directly read active governance standard, England applicability and R4 profile/terminology dependencies. Not evidence all live national services use R4. |
| SRC-099 | NHS England, Building healthcare software: clinical coding, classifications and terminology | Last edited 21 January 2026; some body release statements predate 2023; retrieved 16 October 2026 | Directly read roles of SNOMED CT, dm+d, ICD-10, OPCS-4 and UCUM. Used for conceptual distinctions; stale version statements are not adopted as current release advice. |
| SRC-100 | NHS England, Clinical risk management standards | Last edited 11 October 2024; retrieved 16 October 2026 | Directly read DCB0129 manufacturer and DCB0160 deployment/use distinction. Actual applicability and current release require assessment; no automatic MOD-wide legal conclusion. |
| SRC-101 | NHS England, Booking and Referral — FHIR API | Last edited 30 September 2026; retrieved 16 October 2026 | Directly read booking/referral API and use-case guide requirement, service identifier routing and multiple production versions including 1.6.0. Does not establish every pathway or Defence eligibility. |
| SRC-102 | NHS England, National Events Management Service — FHIR API | Last edited 13 April 2026; retrieved 16 October 2026 | Directly read authorised STU3 publish/subscribe API with MESH delivery; page says production and deprecation under review. Later directory SRC103 updates lifecycle status; not a generic ADT feed. |
| SRC-103 | NHS England, National Events Management Service — Standards Directory | Page last updated 7 October 2026; retrieved 16 October 2026 | Direct live HTTP HTML read confirms Deprecated and planned retirement 30 September 2029. Web-reader cache returned an older December 2025 Active page; live text and official indexed result agree. Later than SRC102; does not imply service already stopped. |
| SRC-104 | HL7 International, FHIR Release 4: EpisodeOfCare | FHIR R4 v4.0.1, 1 November 2019; retrieved 16 October 2026 | Directly read provider association/encounter distinction and tracking-resource role. Not an NHS hospital reporting definition or contractual transfer of responsibility. |
| SRC-105 | NHS England, Hospital Provider Spell — NHS Data Model and Dictionary | Archived May 2024 release; retrieved 16 October 2026 | Official archived definition read through indexed text; current main endpoint returned 403. Used as a dated terminology reference, not a statement of current collection requirements. |
| SRC-106 | NHS England, DCB0160: Clinical Risk Management — Deployment and Use of Health IT Systems | Current listed release 7 June 2018; page last edited 15 June 2023; current page displays review notice; retrieved 16 October 2026 | Directly read current-release listing and notice of DCB0129/DCB0160 review. A review notice is not a new approved replacement standard. |
| SRC-107 | NHS England, National Events Management Service — current service notice | Extracted page displays last edited 6 October 2026, 11:15 am.; retrieved 16 October 2026 | Official service-page content returned by web search and web.open extraction; direct HTTP retrieval blocked in root session. Extraction states no new publisher/subscriber onboarding, migration to MNS plus source API and retirement on 30 September 2029. Tool labels crawl last week; no claim of independently verified fresh HTTP bytes. Confirm specific replacement use-case availability. |
| SRC-108 | HTN Health Tech News, £838 million open framework for future of GP IT announced | Published 13 October 2026; retrieved 17 October 2026 | Directly read. Secondary discovery lead only; procurement claims checked against official primary records. |
| SRC-109 | NHS England / Find a Tender, Digital Primary Care Open Framework — UK3 planned procurement | Published 6 October 2026, 16:17 BST; retrieved 17 October 2026 | Official OCDS API directly read. Reference C454613; ocds-h6vhtk-050c1e. HTML and capability attachment returned 403. Dates and buyer scope indicative; no response required despite structured EOI field. Official API. |
| SRC-110 | NHS England / Find a Tender, Digital Primary Care — UK2 preliminary market engagement | Published 2 May 2025; retrieved 17 October 2026 | Official OCDS API directly read. Historical successor-to-GP-IT-Futures intent; market engagement does not establish an award. Official API. |
| SRC-111 | NHS England, Digital Services for Integrated Care | Last edited 13 October 2026, 09:54; retrieved 17 October 2026 | Directly read. Programme, Buying Catalogue and TIF continuity context; migration guide scope limited to established foundation suppliers. |
| SRC-112 | NHS England, Tech Innovation Framework | Last edited 13 October 2026, 10:56; retrieved 17 October 2026 | Directly read. Extension to 30 September 2027 and current TIF architecture/core functions. Not automatically the requirements of each future DPC lot. |
| SRC-113 | NHS England, Buying Catalogue — Buyers guide | Published 19 March 2026; last edited 23 July 2026; retrieved 17 October 2026 | Directly read. Current buyer workflow; its routes and thresholds are not verified future DPC framework rules. |
| SRC-114 | NHS England, GP Connect supplier progress | Last edited 9 October 2026, 09:37; retrieved 17 October 2026 | Directly read. Source spells supplier InterSytems and product Healthshare. Structured-consumer cells: medications/allergies v1.2.6; immunisations/uncategorised v1.5.0. Blank cells prove no negative capability claim; specification versions do not establish product releases, new-framework eligibility or local deployment. |
| SRC-115 | NHS England, Capabilities, epics and standards | Last edited 19 March 2026; retrieved 17 October 2026 | Directly read. Distinguishes foundation/non-foundation capabilities and baseline/full assurance. Not a listing or approval of an InterSystems foundation product. |
| SRC-116 | NHS England DSIC C&S Team, Introduction to Capabilities and Standards | Updated 29 September 2026; retrieved 17 October 2026 | Official anonymous HTML directly read; some-content warning present. Requirement hierarchy, MUST/MAY epics, acceptance criteria, implementation details and supplementary standards. Contracting vehicle can mandate MAY epics. |
| SRC-117 | NHS England, Modern IT solutions for transforming patient care | Last edited 11 November 2025, 09:40; retrieved 17 October 2026 | Directly read. TIF interoperability, capability and overarching assurance; clinical release and migration mapping/checks. Older supplier-status table is not a new October 2026 approval decision; pilot experience does not guarantee migration duration. |
| SRC-118 | NHS England DSIC C&S Team, RM270 — DSIC capability changes | Effective 26 February 2026; retrieved 17 October 2026 | Official roadmap directly read. Adds Digital Dictation, Medical Reports and Self-service Appointment Check-in; deprecates Productivity. Existing DSIC context, not a substitute for the inaccessible DPC attachment or evidence of ambient AI functionality. |
| SRC-119 | Cabinet Office, Guidance: Frameworks | Updated 13 July 2026; retrieved 17 October 2026 | Directly read. Framework, open-framework and call-off distinctions; framework selection and award without further competition differ from section 20 tendering and statutory direct award. Explanatory guidance, not the final DPC contract. |
| SRC-120 | Cabinet Office, Guidance: Competitive Tendering Procedures | Updated 13 July 2026; retrieved 17 October 2026 | Directly read. Competitive flexible procedure; paragraph 11 distinguishes framework call-off selection from section 20 procedures. Used to identify UK3 terminology requiring clarification, not to determine final procurement terms. |
| SRC-121 | NHS England, GDS agile delivery phase requirements | Last edited 20 August 2026; Data Assurance Board approval June 2026; retrieved 17 October 2026 | Directly read. Discovery, alpha, beta and live context for data products, pipelines and specifications. Detailed governance gates are not adopted as universal Lot 3 contractual obligations. |
| SRC-122 | Government Digital Service, How the beta phase works | Updated 19 February 2021; retrieved 17 October 2026 | Directly read. Private beta uses a limited invited group; public beta broadens use. General delivery guidance, not health-data access permission or final Lot 3 delivery conditions. |
| SRC-123 | NHS England, Clinical system migration guide | Published 21 January 2025; last edited 31 March 2026, 10:22; retrieved 17 October 2026 | Directly read. Intended for established foundation-supplier migrations, not new-supplier onboarding, although some steps may apply. Does not supply a complete local project plan. Covers roles, data checking, cutover and go-live. |
| SRC-124 | NHS England, Medicus EPR: practice perspective case study | Last edited 29 May 2026, 09:44; retrieved 17 October 2026 | Directly read. Park Road Surgery September 2024 implementation, testing, training and migration. Benefits are attributed practice experience, not a controlled evaluation or general migration guarantee. |
| SRC-125 | NHS England DSIC C&S Team, Patient Information Maintenance — GP, C13 | v10.0.3 Effective 13 October 2026; page updated 13 October 2026; retrieved 17 October 2026 | Official page and REST body read. Registration, comprehensive EPR/history, access and transfer/integration epic E00177. Digital Primary Care is a listed contracting vehicle. Published v14.0.0 has future effective date 20 April 2027; do not substitute it for October effective requirements or final tender version. Future-version page directly verified on 17 October 2026: title and metadata say v14.0.0 although the URL slug retains V13.0.0. Future-version page. |
| SRC-126 | NHS England DSIC C&S Team, Digital Diagnostics, C8 | v1.0.2 Effective 22 May 2023; page updated 17 July 2026; retrieved 17 October 2026 | Official specification directly read. E00432 request information and E00433 result viewing are MUST; E00434 reconciliation is MAY. Lists Digital Primary Care; final procurement can impose further requirements. |
| SRC-127 | NHS England DSIC C&S Team, Task Management, C50 | v1.1.0 Effective 26 February 2026; page updated 17 July 2026; retrieved 17 October 2026 | Official page and REST body read. E00267 task CRUD is MUST; E00269 assignment and E00270 overdue flags are MAY. Lists Digital Primary Care; capability coverage alone does not establish all accountability and escalation functions. |
| SRC-128 | NHS England Buying Catalogue, Medicus — Capabilities and Epics | Solution last reviewed 14 May 2025; retrieved 17 October 2026 | Official public HTML directly read through TLS-verified HTTP; web reader failed. Medicus Health Limited, solution 10124-001, Tech Innovation vehicle and all six foundation capabilities. Displayed assessment is not proof of every optional function or local deployment approval. |
| SRC-129 | NHS England Buying Catalogue, EMIS Web GP — Capabilities and Epics | Solution last reviewed 21 July 2022; retrieved 17 October 2026 | Official public HTML directly read. Displays Optum, solution 10000-001, six foundation functions and expired GP IT Futures vehicle; warns it cannot currently be purchased through the catalogue. This does not establish every existing contract or imply the product has stopped operating. EMIS Web GP is not EMIS X. |
| SRC-130 | NHS England, GP IT Futures systems and services | Last edited 29 April 2026, 11:23; retrieved 17 October 2026 | Directly read. Framework expired 31 March 2023 and cannot support new procurements. Published continuity-contract text only reaches June 2026; it does not establish October incumbent contract arrangements. |
| SRC-131 | Digital Marketplace, Access Rio Electronic Patient Record (EPR) | No listing revision date displayed; G-Cloud 14; retrieved 17 October 2026 | Directly read exact service 477329850621376. Access UK Ltd describes mental-health, child-health and community EPR scope. Supplier-submitted description on an official marketplace, not independent clinical evaluation or proof of current call-off eligibility or G-Cloud 15 admission. |
| SRC-132 | Torbay and South Devon NHS Foundation Trust, Electronic Patient Record and MY CARE | No page revision date displayed; states April 2026 launch; retrieved 17 October 2026 | Directly read NHS description of Epic across hospital and specialist-community care, with clinical and administrative functions. Local scope does not establish every Epic configuration, a national primary record or GP foundation classification. |
| SRC-133 | Contracts Finder, Torbay and South Devon NHS FT — Electronic Patient Record Further Competition | Published 24 January 2025; award 13 January 2025; retrieved 17 October 2026 | Notice HTML returned 403; official OCDS release directly read. Epic Systems award via NHS LPP Clinical Digital Solutions framework. Historical exact route, not proof of present CDHS product admission or another buyer's eligibility. |
| SRC-134 | NHS London Procurement Partnership, Clinical Digital Health Solutions | Framework dates 1 October 2024–30 September 2028; page revision date not displayed; retrieved 17 October 2026 | Directly read single-lot category scope across EPR, administration, diagnostics, shared records and integration. General scope does not establish a named product's catalogue admission or a permitted route for a particular purchase. |
| SRC-135 | Government Commercial Agency, G-Cloud 14 — RM1557.14 | Agreement dates 29 October 2024–28 October 2026; retrieved 17 October 2026 | Canonical page directly read after official CCS-domain redirect. Gives October expiry and future G-Cloud 15 replacement wording; 136 describes replacement as already made. Exact product listings are retained as dated evidence, not an assumed current purchasing permission. |
| SRC-136 | Government Commercial Agency, G-Cloud 15 — RM1557.15 | Displayed dates 6 August 2026–5 February 2028; describes a four-year reopening model; retrieved 17 October 2026 | Canonical page directly read. Describes G-Cloud 14 as replaced; transition wording differs from 135. This agreement-level page does not establish that Rio, IRIS or another named G-Cloud 14 service is admitted to G-Cloud 15. |
| SRC-137 | Clinisys, Clinisys WinPath | No publication or revision date displayed; retrieved 17 October 2026 | Supplier HTML directly read. Laboratory information system supporting specimen tracking, result management, authorisation and reporting. Product scope only; no independent performance assessment, exact purchasing configuration or local deployment established. |
| SRC-138 | Sectra Medical, Sectra Breast Imaging PACS and RIS | No publication or revision date displayed; retrieved 17 October 2026 | Supplier HTML directly read. UK RIS offering, examination workflow, imaging and reporting in the described breast-imaging configuration. Do not generalise its functionality to every radiology system or infer local integration. |
| SRC-139 | NHS Supply Chain, Digital Diagnostic Solutions | Framework 1 August 2025–31 July 2027, with 24-month extension option; retrieved 17 October 2026 | Official overview directly read. LIMS, RIS, PACS and related integration categories; supplier list includes Clinisys, Sectra and InterSystems. Exact product/version matrix not inspected. Supplier membership alone does not establish every product's availability or a buyer's purchasing route. |
| SRC-140 | InterSystems, HealthShare Unified Care Record | No publication or revision date displayed; retrieved 17 October 2026 | UK supplier resource directly read. Aggregates source information and provides a clinical viewer; shared presentation need not imply absence of stored data. Product description does not establish a complete current local record, Defence implementation or purchasing route. |
| SRC-141 | Digital Marketplace, InterSystems IRIS for Health Data Platform | No listing revision date displayed; G-Cloud 14; retrieved 17 October 2026 | Exact service 222300201429133 directly read. Supplier-submitted integration, data-management and application-platform scope. Distinct from a complete clinical EPR and from HealthShare. Listing is not independent assurance or proof of G-Cloud 15 admission. |
| SRC-142 | 6B, About the NHS Tech Register | No revision date displayed; register inspected 17 October 2026; retrieved 17 October 2026 | Original compiler's methodology, directly read. England research register; mixed original and secondary inputs, multiple products per organisation, contracted replacements and older systems can coexist. Primary evidence of the register's own counts and method only, not an NHS census or independent verification of its underlying deployment records. Do not infer live market share, revenue share, product ownership or assurance from it. |
| SRC-143 | 6B — NHS Tech Register, Most commonly used LIMS in NHS trusts | No page publication date; checked 17 October 2026; retrieved 17 October 2026 | Direct public HTTP verified live ranking: WinPath 46, Telepath 13, APEX 12. Primary evidence only of the compiled register counts. The category also includes order-communications products such as ICE; do not treat it as a national live-market census. |
| SRC-144 | 6B — NHS Tech Register, Most commonly used RIS in NHS trusts | No page publication date; checked 17 October 2026; retrieved 17 October 2026 | Direct public HTTP verified Cris 57, Soliton Radiology+ 22, Sectra RIS 7. The web cache of the Sectra product page showed 5; live HTTP agrees with 7 and a 6 October 2026 product-page update. Counts can include overlapping and contracted systems. |
| SRC-145 | 6B — NHS Tech Register, Most commonly used PACS in NHS trusts | No page publication date; checked 17 October 2026; retrieved 17 October 2026 | Direct public HTTP verified Sectra 37, Philips Vue 24, AGFA Enterprise Imaging 17. Evidence of the register’s own compiled counts, not independently verified NHS market shares. |
| SRC-146 | Stockport NHS Foundation Trust, New Stockport NHS laboratory information system goes live to enhance services for patients and clinicians | 26 September 2025; retrieved 17 October 2026 | WinPath go-live at Stepping Hill; the hospital reports 9.5 million tests annually and describes result-sharing purposes. A deployment example, not a country market share. |
| SRC-147 | Birmingham Women’s and Children’s NHS Foundation Trust via Sell2Wales, Waiver - BWC_RQ3 - Dedalus (DH OpCo UK Ltd) - Maintenance Contract | 2 June 2026; retrieved 17 October 2026 | Telepath 1 (iLAB TP) maintenance and support; below threshold without competition; estimated 1 April 2026 to 31 March 2027. Not a new-installation framework. OCID ocds-h6vhtk-06aa44. |
| SRC-148 | Medway NHS Foundation Trust, FOI 9229 - IT | September 2024; retrieved 17 October 2026 | Dedalus Telepath LIMS, bidirectional information sharing, image import unavailable in this local configuration. Contract dates 1 April 2024 to 31 March 2025 do not prove current use. |
| SRC-149 | East Sussex Healthcare NHS Trust, FOI 25/097 - Clinical systems | 2025; PDF published May 2025; retrieved 17 October 2026 | Identifies iLaboratory (APEX), DH OpCo UK Ltd, historical contract expiry 31 October 2025, framework N/A, and WinPath implementation. Use for product identity and dated migration, not the current estate. Other rows contain apparent date errors and were not reused. |
| SRC-150 | Newcastle upon Tyne Hospitals NHS Foundation Trust, Newcastle Hospitals Laboratory System – Apex Maintenance Notice – information for GPs and External Laboratory Customers | Updated 7 October 2026; retrieved 17 October 2026 | Operational maintenance notice for 10 October 2026; APEX result outage delays receiving clinical systems. Current local use, not a country count. |
| SRC-151 | capability landscape | Undated; checked 17 October 2026; retrieved 17 October 2026 | Supplier description of Cris: requests, patient management, vetting, scheduling, reporting and GP communications. Claims most widely used UK RIS without a dated denominator. Page also describes Evolution vRIS; keep the products distinct. |
| SRC-152 | Yorkshire Imaging Collaborative, Network Architecture | Undated; describes deployments in 2017–2020; retrieved 17 October 2026 | NHS network explanation of PACS/RIS architecture: AGFA Enterprise Imaging at Harrogate in 2017 and further deployments in 2018–2020; CRIS and Soliton RIS separate. Product table has a Carestream/Vue column inversion; avoid verbatim copying. No exact procurement agreement. |
| SRC-153 | Soliton IT, Radiology+ | Undated; checked 17 October 2026; retrieved 17 October 2026 | Supplier description of modular RIS workflows, scheduling, voice recognition, reporting and multi-site sharing. An unnamed NHS National Framework claim does not verify a current exact route. |
| SRC-154 | Medway NHS Foundation Trust, FOI 8760 - PACS and RIS | February 2024; retrieved 17 October 2026 | Sectra IDS7 PACS installed August 2023; Soliton RIS February 2021; both contract end dates August 2033. NHS Supply Chain route is named without exact agreement or lot. Dated example only: a 2025 Medway supplier-only response calls its RIS supplier Sectra, possibly a prime-contractor distinction; do not infer a product change. |
| SRC-155 | Sectra, Radiology imaging | Undated; checked 17 October 2026; retrieved 17 October 2026 | Broad radiology PACS, VNA, diagnostic viewer and EPR-embedded viewing. Supplier capabilities, not local approval. Broader scope than the breast-only SRC-138. |
| SRC-156 | Sectra, Conformance statements | Includes March 2026 product versions; retrieved 17 October 2026 | Index includes separate DICOM and IHE statements for Sectra PACS/VNA 28.1 and RIS 28.1, March 2026. Index reviewed; not an independent audit of every supported profile. |
| SRC-157 | Philips, HealthSuite Imaging | Undated; checked 17 October 2026; retrieved 17 October 2026 | Official UK page identifies HealthSuite Imaging cloud PACS as Vue PACS with AWS; archiving, viewing, diagnostic reading, reporting and workflow. Availability has regional qualifications. |
| SRC-158 | Liverpool Heart and Chest Hospital NHS Foundation Trust, FOI202425/512 — Clinical System | 12 February 2025; retrieved 17 October 2026 | Vue PACS implementation target September 2025, contract end 30 June 2033. Framework question refers to earlier FOI 500, not inspected. No assertion of a new-purchase route or subsequent go-live. |
| SRC-159 | AGFA HealthCare, Enterprise Imaging | Undated; checked 17 October 2026; retrieved 17 October 2026 | Supplier platform scope: imaging, viewing and worklists; names DICOM, HL7, FHIR and IHE. No proof of local UK deployment assurance or exact framework admission. |
| SRC-160 | Competition and Markets Authority, UnitedHealth Group Incorporated and EMIS Group plc: final report | 2023-09-29; retrieved 17 October 2026 | Table 8.2, printed page 51 (PDF page 52): 2022 England shares by patient volume were EMIS 50–60%, TPP 40–50%, and Cegedim 0–5%. These are published ranges, not practice counts or current 2026 shares. Table 8.1 covers UK 2018–22 with a different denominator. The CMA uses supplier submissions and compares NHS England estimates. Do not infer a current third-place product from Cegedim’s historical share. |
| SRC-161 | Enlivio Health, EMIS Web | No publication or revision date displayed; retrieved 17 October 2026 | Supplier product description. The current brand is Enlivio Health, formerly EMIS; the product remains EMIS Web. Describes primary care, community, hospice and specialist use, including records, appointments, prescribing, documentation and reporting. EMIS-X for GPs is listed as requiring EMIS Web. This does not establish equivalence to the separately named EMIS X in TIF assurance. Retrieved 17 October 2026. No legal contract-party change inferred. |
| SRC-162 | TPP, Products | No publication or revision date displayed; retrieved 17 October 2026 | Supplier description of SystmOne across more than 25 care settings. Common electronic health record with modules for primary and community care, hospital, mental health and other services. Does not prove every deployment uses all modules or that all access is lawful. Retrieved 17 October 2026. |
| SRC-163 | NHS England Buying Catalogue, SystmOne GP: capabilities and epics | 2021-12-09; retrieved 17 October 2026 | Public direct HTTP inspected 17 October 2026. Solution 10052-002; TPP – The Phoenix Partnership (Leeds) Ltd. GP IT Futures marked expired; the entry says it cannot currently be purchased through the Buying Catalogue. Lists six foundation capabilities plus care plans, reporting and unified care record. Last solution review 9 December 2021. Does not establish every current TPP contract position. |
| SRC-164 | Medicus Health, Medicus | No publication or revision date displayed; retrieved 17 October 2026 | Supplier homepage states that Medicus is part of Doctolib. Use for the corporate relationship only, not uncorroborated benefit or regulatory claims. Retrieved 17 October 2026. |
| SRC-165 | Royal Surrey NHS Foundation Trust, Information Governance: Millennium (Oracle) electronic patient record | No publication or revision date displayed; retrieved 17 October 2026 | NHS description of joint Royal Surrey and Ashford and St Peter’s Millennium deployment replacing separate patient administration systems. Relevant clinicians access information on a need-to-know basis. Specific deployment evidence, not a national ranking. Retrieved 17 October 2026. |
| SRC-166 | Ashford and St Peter’s Hospitals NHS Foundation Trust, FOI Request 8697: LIMS, Oncology, and Clinical Noting Systems | 2022; retrieved 17 October 2026 | NHS FOI disclosure: Oracle Cerner Millennium clinical noting; contract 19 December 2019 to 18 December 2029; procurement framework named only as NHS LPP. Lists trust integration engine (Rhapsody), e-Referral Service, data warehouse and medical devices. Historical route; do not map automatically to CDHS 2024. |
| SRC-167 | 6B NHS Tech Register, Most commonly used EPRs in NHS trusts — Acute filter | No publication or revision date displayed; retrieved 17 October 2026 | Direct HTTP inspected 17 October 2026 using the public GET form parameter trust_types[]=Acute. Counts: Oracle 40, Nervecentre 15, Epic 13, CareFlow 13. Original 6B compiled records, not an official NHS census or verified live full-EPR deployments. Filter excludes separate specialist, children’s and women’s labels. No eligible-trust denominator inspected; avoid percentages. Web reader failed for query URL; public curl HTML worked. |
| SRC-168 | capability landscape | No publication or revision date displayed; retrieved 17 October 2026 | Supplier announcement documents Medway EPR becoming CareFlow, with distinctions between patient administration, full EPR and component modules. Use for name history, not current adoption. Retrieved 17 October 2026. |
| SRC-169 | System C Healthcare Limited / Digital Marketplace, CareFlow Electronic Patient Record (EPR) | No publication or revision date displayed; retrieved 17 October 2026 | Exact G-Cloud 14 service 687125563583525; supplier System C Healthcare Limited. Patient administration, clinical and departmental functions, HL7, FHIR and APIs. Supplier-asserted features. Does not prove transfer to G-Cloud 15, local configuration, or complete local assurance. Retrieved 17 October 2026. |
| SRC-170 | East Sussex Healthcare NHS Trust, Trust Board in Public, 16 June 2026: EmPoweR Programme Update | 2026-06-16; retrieved 17 October 2026 | From page 118: four-tranche full Nervecentre EPR programme. Existing emergency department use; cloud migration March 2026; later documentation and prescribing planned for September 2026, then administration, outpatients and theatres February 2027. Pathology timing unconfirmed. Example of planned scope and phased rollout; do not assume later phases completed. |
| SRC-171 | York and Scarborough Teaching Hospitals NHS Foundation Trust, New electronic patient record: information for GPs | No publication or revision date displayed; retrieved 17 October 2026 | NHS explanation of a changed discharge-notification format from 7 May 2026 with Nervecentre go-live; clinical content and key information remain. Example of communication to downstream GPs, not proof of automated record updates. Retrieved 17 October 2026. |
| SRC-172 | York and Scarborough Teaching Hospitals NHS Foundation Trust, Trust celebrate major milestone with successful Nervecentre EPR go-live | 2026-05-22; retrieved 17 October 2026 | NHS announcement of a completed major implementation phase across York, Scarborough, Bridlington and community sites. Includes emergency, inpatient, maternity, paediatric and neonatal services. Does not establish that all modules were implemented. |
| SRC-173 | Mid Yorkshire Teaching NHS Trust / Cabinet Office Contracts Finder, Mid Yorkshire Teaching NHS Trust — Electronic Patient Records System Further-Competition | 2026-02-09; retrieved 17 October 2026 | Exact Nervecentre Software Ltd EPR award: 3 February 2026; contract 3 February 2026 to 1 February 2036; £38,030,300; NHS LPP Clinical Digital Health Solutions Framework Agreement. HTML returned 403. Official OCDS read: https://www.contractsfinder.service.gov.uk/Published/Notice/releases/3310b148-e5ce-4725-85da-c93412854033.json . Establishes award and route, not deployment or other buyers’ entitlement. |
| SRC-174 | 6B NHS Tech Register, Most commonly used EPRs in Community and Mental Health NHS trusts | Undated live register; retrieved 2026-10-17; retrieved 17 October 2026 | Original compiled register, not an NHS publication or audited live estate census. The combined Community + Mental Health filter appears in the title. Direct HTML retrieved. Recorded counts: TPP SystmOne 34; Access Rio 29; Mayden iaptus 13; Enlivio Health EMIS 10; Dedalus Lorenzo 4; Civica Care Records 3; Epic 3; CareNotes 2. Trusts can have several products. Service-focused products rank alongside broad EPRs. A product association does not prove that it is the sole trust-wide EPR. |
| SRC-175 | 6B NHS Tech Register, Most commonly used TIE in NHS trusts | Undated live register; retrieved 2026-10-17; retrieved 17 October 2026 | Recorded implementation associations in England NHS trusts: HealthShare Health Connect 58, Rhapsody 48, NextGen Mirth Connect 24, Ensemble 15, Cloverleaf 7, InterSystems IRIS 6, Qvera 6. An original compiled register, not an NHS census. IRIS is a broader product label than IRIS for Health. Do not pool InterSystems product rows or infer active interfaces. No validated denominator is supplied for market-share percentages. |
| SRC-176 | John Farenden / BCS Primary Health Care Specialist Group, The Single Patient Record: Looking back to move forwards — A personal reflection | 2025-11-13/14 conference; retrieved 17 October 2026 | Primary conference presentation. Cover dates 13–14 November 2025; PDF page 68, ConCR National Interoperability. Supplier-labelled snapshot totals 42 ICSs: Graphnet 11 / c16.9m; Orion 9 / c9.9m; Oracle 8 / c16.9m; InterSystems 6 / c6.6m; Interweave 5 / c8.5m; other 3 / c4.3m. Percentages, if used, are calculated from 11/42 etc, not published product or revenue shares. No separate data collection date. Do not claim current 2026 market shares or relabel the snapshot as current ICBs. Public PDF downloaded, text extracted, and page 68 visually checked. The page also includes programme connectivity and usage charts; those are different measures and are not used for supplier ranking. |
| SRC-177 | Mayden House Limited / Digital Marketplace, iaptus — G-Cloud 14 service 489004178871966 | G-Cloud 14 listing; retrieved 2026-10-17; retrieved 17 October 2026 | Exact supplier product listing. EPR for community and mental health, including NHS Talking Therapies, children and young people mental health, psychological therapies and neurodevelopmental services. Case work, pathways, outcomes, risk management, referrals, appointments, APIs and GP letters. Supplier-stated functions, not independent approval. No G-Cloud 15 admission inference. |
| SRC-178 | Graphnet Health, The Greater Manchester Care Record — case study | 2024-12 filename; retrieved 2026-10-17; retrieved 17 October 2026 | Supplier case study explicitly identifies CareCentric as connecting core systems from different vendors for the Greater Manchester Care Record. Explains a unified record view, health/social care and service plans. Primary supplier content; benefits are not independently measured here. Current general offer also read at https://www.graphnethealth.com/solutions/carecentric-shared-care . |
| SRC-179 | Graphnet Health Limited / Digital Marketplace, Graphnet Shared Care Record — G-Cloud 14 service 329024527242106 | G-Cloud 14 listing; retrieved 2026-10-17; retrieved 17 October 2026 | Exact service listing. Clinical and patient portals, exchange and care plans. Exit provisions distinguish data received from providers, care plans created directly, analysed population data and patient-supplied data. No G-Cloud 15 admission inference. |
| SRC-180 | Orion Health, Solutions for shared care records | Undated; retrieved 2026-10-17; retrieved 17 October 2026 | Labels Amadeus Digital care record. Shared-record product role and modular scope. Standards support is a supplier description, not local NHS assurance. |
| SRC-181 | Orion Health, How Mid and South Essex ICS built the digital foundations for joined-up, smarter, more sustainable health and care | 2025-08-19; retrieved 17 October 2026 | Supplier case study explicitly identifies Amadeus for the Mid and South Essex shared record, a population exceeding 1.2m and 159 organisations. The evidence supports a named product and population; benefit estimates remain supplier claims. Legacy Mid and South Essex footprint does not establish coverage across the new Essex ICB. |
| SRC-182 | NHS Gloucestershire ICB / Find a Tender, Procurement for the Provision of Shared Care Records to Gloucestershire Integrated Care Board — 023005-2024 | 2024-07-24; retrieved 17 October 2026 | Official indexed PDF says the ICB awarded Orion a contract under the NHS England Health Systems Support Framework in March 2023. HTML initial open succeeded but subsequent read returned 403; indexed PDF search text retrieved, but curl full PDF failed. Historical route only, not current framework availability or completed cutover. The bounded historical route is supported by the official indexed text. |
| SRC-183 | OneLondon, London Care Record Partners | Undated page; retrieved 2026-10-17; retrieved 17 October 2026 | Customer programme description identifies Oracle Health HIE. Central OneLondon HIE connects to local HIEs; explicitly not one single system. Professional access is for direct care; scope and participation vary. |
| SRC-184 | Oracle Health, Interoperability — Oracle Health HIE | Undated; retrieved 2026-10-17; retrieved 17 October 2026 | Vendor describes a standards-based, vendor-agnostic point-of-care exchange that aggregates connected clinical sources. Page also describes US networks, which are not applied to UK HIE. No exact UK framework listing verified. |
| SRC-185 | Birmingham and Solihull Mental Health NHS Foundation Trust, FOI 052/2025: Shared Care Record system | 2025 FOI; September2025 URL; retrieved 17 October 2026 | One-page NHS FOI identifies InterSystems HealthShare. Contract spans Birmingham and Solihull, Herefordshire and Worcestershire, and Coventry and Warwickshire; 3.5m patients; £4m; ends April 2029. Procurement framework is not named. Programme association does not establish uniform coverage. |
| SRC-186 | InterSystems, InterSystems Health Connect Healthcare Integration Engine | Undated; retrieved 2026-10-17; retrieved 17 October 2026 | Current vendor page describes an integration engine, high-volume transactions, process management, monitoring and HL7 v2 / FHIR / DICOM / IHE / APIs. Emphasises managed cloud; does not establish every historical NHS deployment model. Former /products/healthshare/health-connect/ URL redirects here. |
| SRC-187 | Rhapsody, Rhapsody Integration Engine — product brochure | 2023-03 URL; retrieved 17 October 2026 | Page 6 describes messaging, routing, transformation, queues, archives, monitoring and resend. Product function evidence, not NHS local assurance or a current contract. |
| SRC-188 | Rhapsody, Rhapsody Integration Engine for Healthcare Interoperability | Undated currentpage; retrieved 2026-10-17; retrieved 17 October 2026 | Current supplier product page names Rhapsody Integration. Hosting options include SaaS, customer infrastructure and iPaaS. AI performance claims are outside this introduction. Do not describe current Rhapsody as an Orion-supplied product. |
| SRC-189 | Wrightington, Wigan and Leigh NHS Foundation Trust, FOI 10077 — Clinical Systems Information | 2024-09 URL; retrieved 17 October 2026 | Section 9 identifies Rhapsody as the trust integration engine, installed 2010, contract expiry December 2025, framework GCloud (generation unspecified), £25,376 and connected systems. Historical deployment and purchasing evidence. Full PDF retrieved and text checked. |
| SRC-190 | NextGen Healthcare, Introduction to Mirth Connect | Undated; retrieved 2026-10-17; retrieved 17 October 2026 | Official documentation describes a standards-based integration engine for bidirectional message routing, filtering and transformation across health systems. Protocol examples include HL7, X12, EDI, DICOM and XML. It is not a clinical EPR. |
| SRC-191 | NextGen Healthcare official GitHub repository, A New Era for Mirth Connect by NextGen Healthcare | 2025-03-19; retrieved 17 October 2026 | Official notice: version 4.6 released 19 March 2025 and future versions use commercial proprietary licensing, available from NextGen or authorised resellers. Existing source code remains on GitHub. Avoid describing all current releases as free open source. No exact current UK public-sector framework software licence verified. |
| SRC-192 | 6B NHS Tech Register, Most commonly used EHRs in GP practices — conflicting retrievals | No publication or revision date displayed; retrieved 17 October 2026 | Inspected 17 October 2026. An indexed web response reported EMIS 3,580, TPP 2,540 and Medicus 9. A later web and direct HTTP response reported TPP 2,540, Enlivio EMIS 994 and Medicus 9. The listed register coverage remained 6,129 GP practices. The difference is unresolved. Do not calculate a current market share or rank from these inconsistent counts. No cause inferred, including no assumed branding-migration explanation. |
Rights, retrieval and correction
Use the publisher’s terms for any future reproduction. Citation does not grant redistribution rights. This local wiki uses original synthesis and brief necessary terms; publication remains off. Seed material and project updates have no inferred public licence.
Some NHS England and CQC pages were accessible through official indexed text while a direct page request returned a JavaScript challenge or access error. Their rows retain that limitation. Legislation was read through its official machine-readable HTML where the web viewer could not render the normal endpoint. Source dates are not replaced with retrieval dates.
When a source changes, review the dependent claim in the evidence matrix, revise the relevant explanation and concept, and record the decision in the research log. Open issues remain in the validation queue.
Programme definition and national interfaces — 20 October 2026
Historical supplier sources above remain a provenance register, not a shortlist, recommendation or future architecture baseline. Source titles retain official names.
| ID | Authority and source | Date or version | Evidence role and limits |
|---|---|---|---|
| SRC-193 | DHSC, Health Bill single patient record fact sheet | published 19 May 2026; retrieved 2026-10-20 | Sections “Objectives of the bill” and “Building the single patient record”: proposed SPR connections build on existing source systems and shared care records. The fact sheet does not create a new secondary-purpose gateway. Roadmap dates are intentions, not evidence of delivered service or Defence access. |
| SRC-194 | UK Parliament, Health Bill considered by House of Lords | 14 October 2026; retrieved 2026-10-20 | Reports second reading on 13 October and schedules committee stage for 28 October. Supports treating the bill as proposed legislation at this research date, not an enacted SPR mandate. |
| SRC-195 | UK Parliament, Health Bill tracker | No publication date established; retrieved 2026-10-20 | Lists HL Bill 52, brought from the Commons, dated 9 September 2026. Read alongside 194; the text extraction lists all stage labels without preserving their visual status, so those labels alone were not used to infer completed stages. |
| SRC-196 | NHS England Digital, National Record Locator | last edited 15 October 2026; retrieved 2026-10-20 | “How this service works”: pointers identify records that remain with providers; retrieval is a separate interaction. Participation and document types are constrained. The page describes a live service alongside a newer API under development. No Defence participation conclusion was established. |
| SRC-197 | NHS England Digital, NRL FHIR API | last edited 12 March 2026; retrieved 2026-10-20 | Lists producer pointer lifecycle and consumer search/retrieval. Version table labels v3 beta and v2.8.0 production. Preserve this version distinction; do not turn the generic service's live status into production assurance for every API. |
| SRC-198 | Scottish Government, Care in the Digital Age delivery plan 2025 to 2026 | 11 August 2025; retrieved 2026-10-20 | Describes the record, front door and platform as related components. This dated plan must not be treated as proof that every planned capability subsequently went live. |
| SRC-199 | Scottish Government, CMO Annual Report 2025–2026, chapter 2 | 2026 report; retrieved 2026-10-20 | Digital-care section discusses MyCare.scot and further shared-record work linked to the Care Reform (Scotland) Act 2025. This supports a continuing development context, not a complete national record or a Defence route. The linked Act failed retrieval; no legal applicability conclusion is drawn from it. |
| SRC-200 | National Digital Platform, Integration Service | undated; retrieved 2026-10-20 | Describes secure standards-based exchange between health boards and external applications/organisations, labels the service in production and directs prospective users to project-specific engagement. Availability does not confer admission. |
| SRC-201 | National Digital Platform, Demographics Service | undated; retrieved 2026-10-20 | Provides CHI-related demographic access. The status says production for internal use; the page separately describes CHI Management Board approval via an HSC-PBPP application for non-NHS Scotland organisations. These statements require reconciliation for a particular external use; do not interpret the application route as approval. |
| SRC-202 | National Digital Platform, Data Access Service | undated; retrieved 2026-10-20 | Describes medication/allergy access, MyCare.scot use and production status. This is bounded clinical content, not evidence of universal longitudinal-record access or a generic write-back interface. |
| SRC-203 | Scottish Government, data strategy 2025 update, Technology and Infrastructure | No publication date established; retrieved 2026-10-20 | Describes CHI integration, NDP service development and medication/allergy representation using FHIR. This supplies a standards and capability lead, not proof that an arbitrary FHIR implementation can connect. |
| SRC-204 | DHCW, Integrated Care Record | undated; retrieved 2026-10-20 | Describes broader integration of health/social-care services and workflows, with phased development. Programme vision is distinct from deployed coverage. |
| SRC-205 | DHCW, Programmes Delivery Committee public minutes | meeting 5 February 2026; retrieved 2026-10-20 | PDF pages 13–14 (one-based) record ICR business-case work and delayed submission planned for March. These dated minutes do not prove either later approval or continuing delay in October. The document identifies itself as confirmed minutes generated with software assistance. |
| SRC-206 | DHCW annual report 2025/26, Mission 1 | publication date not displayed in the extract; retrieved 2026-10-20 | Architecture/NDR section describes target architecture and national data components underpinning medicines, clinical-portal, appointment and ADT services. This supports distinguishing record ambitions from companion capabilities. It does not establish an available Defence API or complete ICR deployment. |
| SRC-207 | DHCNI, encompass FAQs | undated and containing mixed future/current language; retrieved 2026-10-20 | Questions 14–16 distinguish primary care from programme scope, describe external clinician access and state that only selected legacy information migrates. The external-access description combines “read-only” terminology with referral/order functions; exact supported operations need current documentation. No supplier choice for Defence follows. |
| SRC-208 | BSO, Northern Ireland Digital Identity Service go-live | historical 2023 context in the article; exact publication date not established; retrieved 2026-10-20 | Describes demographic validation and propagation to connected services. This is evidence for identity infrastructure as a separate concern, not a current external integration contract. |
| SRC-209 | BNSSG, Connecting Care staff and partners | undated page; retrieved 2026-10-20 | Describes a regional shared summary, user controls, and document display and delivery to GP practices. Supports separating record access from correspondence delivery. It is one regional example, not a UK-wide design. |
| SRC-210 | BNSSG, Connecting Care data sharing agreement v9.4 | date not independently established from the extract; retrieved 2026-10-20 | Sections 3.1.4–3.1.5 require incoming organisations to establish sharing authority and distinguish onward requests. Architecture appendix describes integration, repository, viewing, matching and document sharing as different components. Treat as a local reference pattern requiring current applicability checks. |
| SRC-211 | Owner direction: COPPER TIGER programme definition and publication | 2026-10-20; retrieved 2026-10-20 | Programme scope, leading architectural hypothesis, supplier neutrality and authority to update this wiki. Direction only; no public factual or organisational approval claim. Internal deliberations remain outside the published corpus. |
Shared-record capabilities and supporting references — 22 October 2026
Owner direction defines the proposed Defence capabilities. The public references explain specific concepts and continuity controls; they do not approve the Defence design.
| ID | Authority and source | Date or version | Evidence role and limits |
|---|---|---|---|
| SRC-212 | Owner direction: Defence Shared Care Record capability clarification | 2026-10-22; retrieved 2026-10-22 | Authorised synthesis of the primarily read-only DShCR, coupled IntP, access profiles, HPD, EMPI and supporting tools. Continuity, forms and patient-facing features remain options to explore. Direction only; no claim of organisational approval, public fact or delivered capability. Raw questions and deliberations remain outside the reader corpus. |
| SRC-213 | NHS England Digital, Our capabilities | Last edited 21 May 2024; retrieved 2026-10-22 | Directly read electronic-care-record group. Defines a PHR as a secure online health, care and wellbeing record managed by its subject, who can add information. A portal qualifies when it meets that definition. Published capability model, not a universal terminology mandate or evidence of a Defence service. |
| SRC-214 | NHS England Digital, CAF-aligned DSPT: D1 Response and recovery planning | Last edited 26 August 2026; retrieved 2026-10-22 | Directly read D1.b and D1.c. Gives an offline record repository as one fallback example; discusses temporary paper processes, backlog recovery and exercising plans. Supports continuity-option research, not a prescribed Defence topology, automatic MOD applicability or proof that a retained copy alone provides continuity. |
| SRC-215 | NHS England DSIC, Secondary Care EPR Requirements v2.0: Non-Functional Requirements | Published 29 June 2022; retrieved 2026-10-22 | Directly read NFR-002/003 on read-only availability during planned and unplanned downtime, and NFR-012 on recording potential data gaps. A dated secondary-care requirements reference. No Defence mandate, selected architecture or adoption of its numerical recovery targets follows. |
| SRC-216 | HL7 International, FHIR Release 4: Base Resource Definitions | FHIR R4 v4.0.1, 2019; retrieved 2026-10-22 | Directly read identity and metadata sections. Distinguishes business identifiers, server resource identity, versions and source metadata. Copies may have different logical IDs; version IDs need not sort chronologically and retained history is not mandatory. Technical reference, not selection of FHIR R4 or a Defence identifier scheme. |
| SRC-217 | HL7 International, FHIR Release 4: Provenance | FHIR R4 v4.0.1, 2019; Trial Use, maturity 3; retrieved 2026-10-22 | Directly read scope and relationships. Records activities, agents and entities involved in creating or revising information; distinguishes provenance from event auditing. Illustrative model only; no Defence implementation or complete assurance follows from recording provenance. |
| SRC-218 | NIST, FIPS 180-4: Secure Hash Standard | August 2015; revision planning note 7 March 2023; retrieved 2026-10-22 | Directly read publication abstract and status. Hash algorithms produce message digests for detecting change. A digest is not a patient identifier, clinical-equivalence decision, freshness check or standalone proof of authorship. No algorithm or canonical representation is selected for Defence. |
| SRC-219 | Owner direction: governing question and inclusive patient scope | 2026-10-22; retrieved 2026-10-22 | Approved wording centres on maintaining patients’ lifelong GP records to applicable NHS conventions and standards, continuity and transfer to NHS general practice when care arrangements change, alongside a complementary DShCR. Includes Armed Forces and civilian patients within Defence healthcare scope. Direction only; no claim of public policy, organisational approval or delivered capability. Full wording history remains in internal context. |
| SRC-220 | Owner direction: linked questions and DShCR information sharing | 2026-10-23; retrieved 2026-10-23 | Approved two linked questions: lifelong PRC maintenance and transfer from and to NHS general practice when Defence care arrangements begin and end; complementary DShCR. Fuller green explanation: contiguous, longitudinal overview, authorised complete-source access, business continuity options and two-way IntP exchange. EMPI/HPD provide supporting context; core conditions, medications, vaccinations and allergies support CDSS in independent specialist source systems. Information authority, currency and reconciliation remain to be defined. The homepage introduction omits its Care Hub/Cortisone clause. Direction only; no public policy, formal approval or delivered capability claim. Full revisions remain in internal context. |
Programme terminology clarification — 23 October 2026
| ID | Authority and source | Date or version | Evidence role and limits |
|---|---|---|---|
| SRC-221 | Owner direction: Defence healthcare and military medicine distinction | 2026-10-23; retrieved 2026-10-23 | Owner-directed distinction: Defence healthcare retains the wider Armed Forces/civilian scope; occupational health-led qualifies military medicine. Authorises consistency edits while retaining earlier wording as dated history. Proposed framing, not an official taxonomy, changed care entitlement or new access authority. Public-source findings and specific occupational-care examples keep their original scope. |