Skip to main content

Production Checklist

App Orchard requirements​

  • HTTPS redirect URI registered in App Orchard
  • client_id is the production (non-sandbox) value from App Orchard
  • PKCE S256 is used (✓ built in)
  • Patient banner rendered when need_patient_banner=true (✓ built in)
  • App reviewed and approved by Epic (2–4 weeks)

Infrastructure​

  • HTTPS with valid certificate (Let's Encrypt or hospital CA)
  • server.forward-headers-strategy=native set for proxy deployments
  • Redis (or sticky sessions) configured for multi-instance deployments
  • Database backups if you add persistent storage
  • Monitoring: Actuator /health endpoint exposed to load balancer

Security​

  • client_id and any secrets in environment variables (not in application.yml)
  • Log level is INFO or WARN in production (not DEBUG)
  • Session timeout configured (spring.session.timeout=3600s)
  • HTTPS enforced — no HTTP in production
  • CORS configured if frontend and backend are on different origins

Compliance (HIPAA)​

  • BAA signed with your cloud provider if PHI passes through
  • Access logs retained per your organisation's retention policy
  • Session data (which contains PHI via patient context) encrypted at rest in Redis
  • Epic App Orchard review completed (they check HIPAA compliance posture)

Testing before go-live​

  • Full EHR launch flow tested with Epic production sandbox
  • Token refresh tested (wait > 58 minutes or use a short-lived test token)
  • Session expiry warning visible to users
  • Error pages render correctly (no stack traces exposed)
  • Accessibility: patient banner keyboard-navigable, contrast ratio meets WCAG 2.1 AA

← Deployment