Allscripts / Veradigm Decommissioning — License Savings Without Retention Risk

Allscripts / veradigm decommissioning is the engineered retirement of a Sunrise, TouchWorks, Professional EHR, Practice Fusion or related Allscripts/Veradigm instance after its active workflow has moved to a successor system. It involves five workstreams: (1) full source-system extract to the long-term archive — every clinical, financial and operational record preserved under HIPAA, state retention and Joint Commission requirements; (2) successor-system integration so historical context retrieves through the new EHR's clinical viewer; (3) license avoidance — terminating Allscripts/Veradigm or Altera support contracts, Sybase/SQL Server licenses, third-party integration licenses, DR replication contracts and application-support staffing; (4) infrastructure retirement — server, storage, network and DR retirement per IT asset disposal policies with NIST 800-88 media sanitization; (5) knowledge transfer — capturing institutional knowledge from clinicians, IT staff and HIM personnel before the system goes dark. The allscripts / veradigm decommissioning runbook coordinates all five so the system goes off-line without gaps in retention, retrieval or audit-readiness.

Three converging drivers. First, the 2022 Allscripts/Veradigm split created uncertainty — Sunrise moved to Constellation Software's N. Harris Group (now Altera Digital Health), Veradigm carries the ambulatory / payer / life-sciences book with public-listing trouble (delisting drama, restated financials, SEC investigation). Many health systems have chosen to reduce dependency. Second, successor EHRs (Epic, Cerner / Oracle Health, Altera Sunrise for customers who stayed) are now in production at most large IDNs, so the historical Allscripts/Veradigm instances are no longer needed for active workflow — only for retention. Third, license-maintenance fees and infrastructure costs for zombie systems running purely for retention range $1M–$5M+ per year per instance, with cloud archive alternatives 70–85% cheaper. The CFO wants the savings; the CIO wants the security-patching burden off the team; the CMIO wants no clinician forced to log into a deprecated system for historical context. Allscripts / veradigm decommissioning satisfies all three.

Through the long-term archive deployed before the source system is decommissioned. Every required record — Sunrise clinical and financial, TouchWorks ambulatory, Professional EHR, Practice Fusion, FollowMyHealth, dbMotion identity reconciliation, Veradigm Network claims (with appropriate Data Use Agreements) — extracted in full to the cloud archive. Per-state retention engine carries Texas 7yr, Massachusetts 30yr, California 7+ (longer pediatric), Illinois 10yr ambulatory, New York 6yr post-encounter or pediatric age 28, Florida 5yr — computes maximum applicable retention per record. S3 Object Lock enforces immutability. HIPAA accounting-of-disclosures logging on every retrieval. Joint Commission and CMS Conditions of Participation audit retrieval served from the archive with sub-15-second SLA. Auditors see a stronger retention story after decommissioning than before — one consolidated log instead of multiple instance-specific logs.

Historical patient context retrieves through the successor EHR's clinical viewer via the archive's integration. For Epic customers, the archive registers as a Care Everywhere or Health Information Exchange partner — pediatric history, longitudinal medication, problem-list timeline and historical encounters surface in Hyperspace alongside current Epic data. For Cerner / Oracle Health customers, the archive integrates via BedRock or FHIR R4 endpoints into PowerChart. For Altera Sunrise customers (post-2022), the archive integrates back through Sunrise's own data layer for retrospective queries. For ambulatory practices that moved to athenahealth, NextGen or eClinicalWorks, the archive integrates via FHIR R4. The clinician sees one continuous patient timeline — they do not log into a deprecated Allscripts/Veradigm system. The allscripts / veradigm decommissioning is invisible from the clinical workflow side once the integration is live.

For a single Allscripts/Veradigm instance — typical Sunrise instance at a single hospital or TouchWorks across one ambulatory group — 16–22 weeks end-to-end including archive deployment, successor-EHR integration, license cancellation coordination, infrastructure retirement and final sign-off. For a multi-instance health system — e.g., a large IDN retiring acute Sunrise plus 15 TouchWorks ambulatory practices plus 5 Practice Fusion subscriptions — 8–14 months with instances retired in waves. The pacing is set by archive deployment (12–18 weeks per instance, often parallelized), successor-EHR integration testing, license-cancellation notice periods (Allscripts/Veradigm contracts typically require 90 to 180 days notice), and CFO sign-off cycles. The allscripts / veradigm decommissioning runbook sequences these so license cost savings start accruing as soon as legally possible.

Yes — and that is a frequent scenario. After the 2022 Constellation Software / N. Harris Group acquisition of Sunrise (rebranded Altera Digital Health), many health systems chose not to renew Altera contracts and migrated active clinical workflow to Epic or Cerner / Oracle Health. The historical Sunrise instance — whether technically Allscripts pre-2022 or Altera Digital Health post-2022 — becomes the allscripts / veradigm decommissioning candidate. The data model is unchanged across the corporate boundary; the archive ingests from the Altera-managed Sunrise instance using the same channel-1 interfaces it would have used before the split. Sunrise license retirement saves the Altera support fee; the underlying Sybase or SQL Server license retires the same way; the rest of the runbook proceeds identically.

Required for HIPAA Security Rule compliance. Allscripts / veradigm decommissioning includes a media-sanitization workstream coordinated with your IT asset disposal vendor: NIST 800-88 Clear for systems being repurposed within the organization (cryptographic erase plus single-pass overwrite); Purge for systems leaving the organization (multi-pass overwrite, degaussing for magnetic media, or cryptographic erase with verified key destruction); Destroy for end-of-life media (shredding, incineration). Every disposed device is logged with serial number, sanitization method, verification result, operator identity and disposal vendor — generating the HIPAA-compliant audit trail OCR will want if a breach narrative ever references the decommissioned infrastructure. The runbook ties media disposal to the archive sign-off — no media leaves the data center until the archive is verified complete and signed.

All carried through the archive. Subpoenas active at the time of allscripts / veradigm decommissioning get logged as legal holds in the archive — affected records' retention windows extend indefinitely until the matter resolves. HIPAA right-of-access requests in flight are completed before source decommission so the requester sees no service interruption. Open OCR investigations, Joint Commission audits and SOX audits get a memo from the privacy officer and legal counsel noting the archive replacement and providing the new retrieval contact — auditors typically welcome the upgrade because archive retrieval is faster and the chain-of-custody documentation is stronger than source-system retrieval. The legal team signs off on the legal-hold inventory before source decommission proceeds.