Engineered allscripts / veradigm data archival for Sunrise (and Altera Sunrise), TouchWorks, Professional EHR, Practice Fusion, FollowMyHealth, dbMotion and Veradigm Network. Queryable cloud archive with S3 Object Lock, per-state retention policies, HIPAA accounting-of-disclosures and sub-15-second record retrieval.
The largest hidden cost in any health system's Allscripts/Veradigm portfolio is not the active EHR — it is the historical instance kept alive purely so auditors and patients can retrieve records during the 7-to-30-year retention window.
After a health system moves active clinical workflow off Sunrise (to Epic, Cerner / Oracle Health or — for some post-2022 customers — staying on Altera Sunrise but consolidating other systems), the historical Sunrise instance frequently stays online for years afterward. The reason is retention: HIPAA's 6-year federal floor, state laws extending to 30+ years for adults and age-of-majority-plus for pediatrics, Joint Commission audit demands. Patients exercising HIPAA right-of-access, attorneys subpoenaing records, internal audits chasing financial reconciliations, OCR investigations chasing breach narratives — all require record retrieval years after the active EHR moved on. The same is true for retired TouchWorks practices, end-of-life Professional EHR installations and Practice Fusion subscriptions that lapse after a practice's clinician retires.
The result is a portfolio of zombie systems running on aging Sybase or SQL Server stacks, with database licensing, server infrastructure, DR replication, security patching and application-support payroll all consumed by systems that no clinician uses. Health systems routinely spend $1M–$5M+ per year per zombie Allscripts/Veradigm instance just for the retention obligation. An allscripts / veradigm data archival project retires that liability by exporting every required record into a queryable cloud archive, decommissioning the source system, and serving retrieval requests through a purpose-built API and viewer for sub-15-second response.
The archive carries per-state, per-record-type retention rules — Texas 7 years, Massachusetts 30, California 7+, Illinois 10 for ambulatory, New York 6 years post-last-encounter or pediatric age 28, pediatric age-of-majority-plus everywhere — and computes the maximum applicable retention per record. S3 Object Lock enforces immutability for the computed window. Legal holds extend retention for active litigation. Records past every applicable retention generate a signed certificate of destruction that satisfies HIPAA documentation. Auditors, attorneys, patients and clinicians all retrieve through role-appropriate interfaces with full HIPAA accounting-of-disclosures logging.
Six capabilities that turn an archive from a liability into a queryable asset.
Records indexed by patient pseudonym, encounter ID, fiscal period and document type for sub-15-second per-record retrieval. Not 'restore the database and search' — direct query against the archive.
50-state retention policy engine per record type. Computes maximum applicable retention. Pediatric age-of-majority-plus rules enforced dynamically based on patient DOB band.
Records written with S3 Object Lock (or Azure Blob immutable storage / GCS Bucket Lock) for the computed retention window. Tamper-evident. Legal holds extend retention for litigation.
Every retrieval logged with requester identity, patient pseudonym, scope, purpose and recipient. Exports to SIEM. Satisfies HIPAA 6-year accounting-of-disclosures rule.
Clinicians via EHR-style viewer, finance via OTBI/BI Publisher, auditors via audit portal, patients via patient-portal integration. One archive, four retrieval modes.
Hot tier for recent retention, infrequent-access for mid-window, Glacier/Archive for the oldest. 70–85% TCO reduction vs keeping the source system online.
A repeatable workflow built for Allscripts/Veradigm retirement. Typical timeline: 12–18 weeks per source instance.
Privacy officer, HIM director, legal and CFO walkthrough. Inventory of every Allscripts/Veradigm instance considered for retirement. Per-state retention policy register for each record type. Pediatric and litigation-hold inventory. PHI classification per domain.
Sunrise / TouchWorks / Professional EHR / Practice Fusion / dbMotion / FollowMyHealth extracted in full. Output staged as encrypted Parquet partitioned by patient-pseudonym, encounter, fiscal year and document type. Signed manifests per partition.
Records loaded into the long-term archive (S3 / GCS / Azure Blob with Object Lock or equivalent). Retrieval indexes built — patient pseudonym, encounter ID, fiscal period, document type. Per-state retention policy applied per record. Tiered-storage routing per age.
Clinician viewer, finance OTBI/BI Publisher views, auditor portal, patient-portal integration deployed. Each tested with role-appropriate sample queries. Sub-15-second retrieval SLA verified.
Reconciliation pack: source-instance record count vs archive record count per facility per fiscal year. Privacy officer, HIM director, CFO countersign. Source Allscripts/Veradigm instance frozen, then decommissioned per the allscripts / veradigm data archival runbook.
Archive runs unattended. Retrieval requests logged for HIPAA accounting-of-disclosures. Per-state retention enforcement automatic. Tiered-storage routing automatic. Annual archive health review and per-state retention policy update.
What lets a single archive serve 50 states, multiple record types and pediatric age-of-majority-plus simultaneously.
Every state's medical-records retention rule encoded per record type — adult ambulatory, adult inpatient, pediatric, mental health, controlled substance, billing record, accounting-of-disclosures.
Per-state pediatric retention computed from patient DOB band — Illinois age 23, New York age 28, Massachusetts general 30 years. Records eligible for purge only when every applicable window has expired.
Per-patient, per-encounter or per-litigation legal holds extend retention indefinitely while active. Hold release returns the record to its normal retention computation.
S3 Object Lock (or equivalent) configured per record with the computed retention window. Tamper-evident — no admin can shorten retention without breaking the Object Lock signature.
When every applicable retention window expires, purge generates a signed JSON certificate covering record identifier, retention windows applied, destruction timestamp and operator identity. Satisfies HIPAA documentation.
States periodically update retention rules. The policy engine refreshes annually; records under active retention recompute against the new rules. Audit log captures any change.
Allscripts / veradigm data archival is the engineered retention of Sunrise, TouchWorks, Professional EHR, Practice Fusion, dbMotion and Veradigm Network historical records — clinical, financial, operational — in a queryable cloud archive that satisfies HIPAA, state retention laws and Joint Commission requirements after the source systems are decommissioned or downsized. A backup is a point-in-time copy intended for disaster recovery; you cannot query it without restoring the entire system. An archive is structured for retrieval: records indexed by patient pseudonym, encounter ID, fiscal period and document type, retrievable in sub-15 seconds, signed and timestamped per access. Backups age and are eventually purged; archives live for HIPAA 6-year minimum, state-specified 7-to-30-year windows and pediatric age-of-majority-plus retention. The two solve different problems and the allscripts / veradigm data archival design treats them as such.
Everything you are required to retain after the live system is downsized. Sunrise clinical and financial records (encounters, charges, orders metadata, results metadata, ADT events, charge master, provider tables, Sunrise Financial Manager data); TouchWorks ambulatory records (scheduling, encounter financials, charges, claims, clinician roster); Professional EHR mid-market ambulatory records; Practice Fusion cloud EHR records (subscription-tier data, encounter financials, e-prescribing metadata); FollowMyHealth patient-portal interactions (encounter substantiation for HIPAA accounting); dbMotion cross-EHR identity reconciliation logs; Veradigm Network claims and de-identified clinical datasets (where the customer holds the data-use authorization). For health systems that moved off Sunrise to Cerner or Epic after the 2022 Altera split, the historical Sunrise instance becomes an allscripts / veradigm data archival candidate in its entirety — every byte preserved, source system decommissioned.
The archive enforces multiple retention windows per record type per jurisdiction simultaneously. HIPAA's 6-year federal floor applies to accounting-of-disclosures logs and many compliance artifacts. State medical-records laws stretch much further — Texas 7 years post-last-encounter, Massachusetts 30 years, California 7+ years (longer for pediatrics — typically age of majority + 7), Illinois 10 years for ambulatory records, New York 6 years post-last-encounter or until pediatric patient turns 28, Florida 5 years post-last-encounter. The allscripts / veradigm data archival policy engine carries per-state, per-record-type rules and computes the maximum applicable retention per record. S3 Object Lock (or equivalent) enforces immutability for the computed window; legal hold overrides extend retention for active litigation. Records past retention are purged with a signed certificate of destruction that satisfies HIPAA documentation requirements.
Yes — each through a role-appropriate interface. Clinicians querying historical patient records access through an EHR-style read-only viewer that respects break-glass logging and Minimum Necessary. Finance accesses through OTBI or BI Publisher views on the archival Parquet store, with PHI-handling consistent with how the data was loaded (LDS, Safe Harbor or pseudonymized). Internal audit, external auditors and HIPAA OCR investigators access through the audit retrieval portal with full chain-of-custody — every record they touch is logged with auditor identity, scope and purpose. Patients exercising HIPAA right-of-access requests retrieve through your patient-portal integration, with PHI re-identification keyed off the same KMS pseudonymization tokens. Every retrieval is logged for HIPAA accounting-of-disclosures whether the requester is internal or external.
Typical health systems running Sunrise plus TouchWorks plus several ambulatory practices pay $1M–$5M+ annually in combined license maintenance, server infrastructure, database licensing (Sybase or SQL Server), application support staff and DR replication just to keep the historical instance online — even when active clinical workflow has moved to a successor EHR. Allscripts / veradigm data archival in a tiered cloud object store (S3 / GCS / Azure Blob, with infrequent-access tiering for older partitions and Glacier / Archive tier for the oldest) runs $50K–$300K annually depending on scale, with steady-state operational footprint of one engineer at a fraction of a FTE. Health systems routinely report 70–85% TCO reduction on the historical retention burden after allscripts / veradigm data archival completes.
The split changed support contracts and ownership, not the underlying data model — the archive treats Sunrise data (whether under Allscripts pre-2022 or Altera Digital Health post-2022) and Veradigm ambulatory data as a single unified archive. This matters most for health systems that kept Sunrise under Altera while consolidating downstream onto Oracle Fusion, or that moved off Sunrise entirely after the split and need the historical Sunrise instance archived. The allscripts / veradigm data archival pipeline ingests from the Altera-managed Sunrise instance using the same channel-1 interfaces it used before, and merges that history with TouchWorks, Professional EHR, Practice Fusion, dbMotion and Veradigm Network records into one searchable archive. Auditors see a unified retention story regardless of which corporate parent owned which product when.
Yes. Pediatric retention is the longest tail in healthcare records — most US states require retaining minor patient records until age of majority (18) plus a further 5 to 10 years, meaning a record created for an infant must be retained for 23 to 28 years. Some states extend further: Illinois Mental Health and Developmental Disabilities Confidentiality Act requires age 23, New York requires retention until age 28, Massachusetts general medical retention is 30 years. The allscripts / veradigm data archival retention policy carries patient date-of-birth (or birth-year band under Limited Data Set rules) per record and computes retention dynamically — a 2026 record for a 5-year-old patient in Illinois gets a 23 - 5 + retention extension = 18-year retention beyond the federal HIPAA floor. The S3 Object Lock window is set to the computed maximum. Purge happens only when every applicable retention window has expired.
Many post-2022 health systems moved off Sunrise to Epic or Cerner and need the historical Sunrise data accessible from the successor EHR's context. The allscripts / veradigm data archival store exposes a retrieval API that the successor EHR can call: given an Epic CSN or Cerner FIN, find related historical encounters in the Sunrise archive. Pediatric records, problem-list history and longitudinal medication history retrieve through a single API call. For Epic, the integration registers as a Care Everywhere or Health Information Exchange partner; for Cerner / Oracle Health, the integration uses BedRock or FHIR R4 endpoints. Patients see one continuous clinical timeline; clinicians stay in their primary EHR; the allscripts / veradigm data archival store sits invisibly behind the retrieval API.
30-minute scoping call with your privacy officer, HIM director and CFO. We inventory the retired-instance candidates, model per-state retention, size the archive footprint, and produce a concrete allscripts / veradigm data archival plan and budget before the call ends.