Zedmed Third-party Integration Questionnaire

First Name *

Email *

1. Integration Overview

a.What system, software, or vendor are you integrating with Zedmed?

b.What is the primary goal of the integration? (e.g. sync appointments, transfer patient data, post invoices, send clinical documents)

c.Is the integration one-way (read-only) or two-way (read/write)?

d.How often do you plan to call the API? (e.g. real-time, every 5 minutes, daily batch, etc.)

e. Please attached any architecture documents or spec you may have.

No file chosen

a.What authentication method will you use? (e.g. API key, OAuth2, Basic Auth, or Zedmed-managed SSO)

b.Will API requests originate from fixed/static IP addresses?

c.How will you store and protect API credentials?

d.Do you require end-to-end encryption for data in transit and at rest?

a.What specific data sets do you require access to? (e.g. patients, appointments, billing, clinical notes, results, referrals)

b.Do you require read-only or full CRUD access (create, read, update, delete)?

c.How much historical data do you need to access (if any)?

d.What format should the data be delivered in? (e.g. JSON, HL7, FHIR)

a.How many API calls per minute/hour/day do you expect to make?

b.What is your average payload size per request (in KB/MB)?

c.Do you expect traffic spikes during certain periods (e.g. morning session syncs)?

d.Are there any performance or response time requirements?

c.Do you have retry mechanisms or backoff strategies in place in case of rate-limiting?

a.Do you require access to a sandbox or test environment?

b.Will you conduct load testing before going live?

c.What is your estimated timeline for testing, deployment, and go-live?

d.How will you validate that the integration is working as expected?

a.Who is your technical contact (name, role, phone, email)?

b.Are you developing the integration in-house or using a third-party vendor?

c.Who should we contact for support escalations or outages?

a.Do you need the integration to comply with specific standards (e.g. ISO 27001, HIPAA, NDB)?

b.What is your internal SLA for resolving API-related issues?

Please do not fill in this field.