Healthcare & Operations · agentic-AI-assisted Master Patient Index
One trusted patient identity, across every system in your trust.
OpenMPI links the same patient across every source system in your trust or your ICS — EPR, PAS, Lab, Radiology, ED, Maternity, Mental Health, Community, Social Care — and across every assigning authority — NHS number, local MRNs, hospital numbers, MPI surrogate keys.
Where traditional MPI platforms still rely on a steward to manually dictate every borderline link, OpenMPI uses machine intelligence to read each ambiguous case, surface the relevant evidence in plain English, and route the right question to the right person — driving steward productivity up by 2–4×. The AI never decides on its own. Your humans always make the call.
v0.1.7 preview
Multi-tenant
DCB0129 + 0160 evidence
SHA-512 audit chain
NHS Acute first
Patient identity, redesigned for the agentic-AI era.
Patient identity is one of the highest-stakes parts of any NHS digital programme. Get it wrong and the consequence is a wrong-patient clinical decision — wrong allergies, wrong consent, wrong drug. Traditional MPI platforms have not changed shape in 25 years: they ask a human to read every borderline case, score it manually, and merge or split. OpenMPI is the first NHS-first MPI redesigned around agentic AI.
AI explains, humans decide
For every below-confidence match, the AI reads the candidate pair, gathers the relevant evidence, and explains in plain English why it thinks the records refer to the same patient — or don’t. The steward sees the rationale alongside a per-feature score breakdown, and decides.
Built-in integration engine
OpenMPI plugs into every standard your trust already speaks — HL7 v2.5.1, FHIR R4, IHE PDQm + PIXm, CSV bulk, NHS Spine PDS-FHIR and webhooks — bidirectionally, from day one. No rip-and-replace.
Clinical-safety evidence by construction
Every release ships a Clinical Safety Case Report under DCB0129 (manufacturer) and DCB0160 (deployer), signed by a named CSO. 18 hazards on the live log, re-evaluated on every release. Bias regression on four protected name groups. Production-activation gate explicit.
How a patient gets matched
Seven clear steps, from raw demographics to a confident outcome. The AI explains every borderline case in plain English — and your stewards always decide what happens below the auto-link line.
1. Validate
Check the data is well-formed. Catch typos and bad NHS numbers up front, before they pollute the index.
2. Look up
Exact match by NHS number or known MRN. Sub-millisecond resolution for the auto-link path.
3. Find candidates
Narrow millions of patients down to a short, relevant list using phonetic, demographic and locality keys.
4. Score
Rate the similarity of every candidate on a 0–1 confidence scale. Per-feature breakdown is preserved for the steward to read.
5. Cross-check with NHS Spine
Verify identity against the Personal Demographics Service as the national source of truth, with discrepancy detection across six fields.
6. AI explains · the differentiator
When the score is borderline, the AI reads the evidence and explains in plain English why it thinks the records match — or don’t. Rationale renders alongside the numeric score; never replaces it.
7. Steward decides
A human reviews every uncertain case with full context, side-by-side panels, and the AI rationale block. Two-eye sign-off on every cross-trust merge. Audit-trailed, reversible.
Coming v0.7+: Patient confirms
For ambiguous cases, the patient is asked to confirm via NHS App, SMS, email or letter — closing the identity loop. Templates are CSO-co-signed; sends are steward-approved.
Works with what you already have.
OpenMPI speaks every healthcare standard your trust already speaks — bidirectionally, from day one. No rip-and-replace.
HL7 v2.5.1
Your existing PAS / EPR feed. ADT messages, real-time admission and update events.
FHIR R4
Modern web-standard messaging. RESTful patient APIs your apps can call directly.
IHE PDQm + PIXm
Global identity-resolution standards. Cross-organisational patient lookup, conformant by design.
CSV bulk
Migration loads and periodic exports. Drag-and-drop wizard with preview and per-row error capture.
NHS Spine PDS-FHIR
National source of truth. Native sync with the Personal Demographics Service, with JWT-bearer authentication.
Webhooks & custom feeds
Modern integrations. Push notifications to any system listening over HTTPS.
Compliance posture, designed in — not bolted on.
Every regulatory surface that an NHS Acute MPI must satisfy. Every release reads them, signs them, and ships the evidence to the deployer pack.
NHS-specific
DCB0129 (manufacturer) · DCB0160 (deployer) · DSPT (annual) · DTAC · DCB1596 · ICB / ICS data-sharing agreement template.
Privacy
UK GDPR · DPA 2018 · Common Law Duty of Confidence · DPIA template · DSAR endpoint · restricted-record handling.
Healthcare interop
HL7 v2.5.1 · FHIR R4 + UK Core · IHE PIXm (ITI-83) + PDQm (ITI-78) · NHS Spine PDS-FHIR · NHS Modulus-11 · NHS Data Dictionary.
Information security
OWASP ASVS L2 · Cyber Essentials Plus (path) · ISO/IEC 27001 / 27701 / 27799 (path) · structural row-level tenant isolation.
Records & audit
21 CFR Part 11 audit-trail style with SHA-512 chain · WHO Patient ID Goal #1 · per-tenant per-record advisory locking · monthly partitioning.
AI safety
Anthropic AUP + OpenAI usage policies · NHS England AI Ethics — explainability live; rationale block always rendered · cost-gate defence-in-depth (env + per-tenant + per-call).
Sister products in the Healthcare cluster
OpenMPI is one of the two cornerstones of healthcare interoperability — patient identity. The other cornerstone is integration engine, where OpenLI HIE sits. Together they cover the full lifecycle of an NHS Trust integration estate.
OpenLI HIE
Build new integrations in plain English. The natural-language development environment for HL7, FHIR and IRIS pipelines. Pairs with OpenMPI: HIE moves the messages, OpenMPI resolves the identities.
OpenLI TIE Migration
Migrate legacy integration engines to a modern platform. AI-governed, phase-gated, evidence-backed. The natural starting point if you’re replacing Rhapsody, Mirth or InterSystems IRIS.
OpenLI Data Migration
Enterprise data migration for NHS PAS / EPR upgrades. Contract-driven ETL with quality gates and audit trails. OpenMPI consumes the resulting unified patient stream.
IMX Monitor
AI-native monitoring for the integration estate. Watches your HIE / OpenMPI / TIE Migration deployments and triages incidents with the same agentic SDK.
IRIS CoPilot
Plain-English modernisation for InterSystems IRIS productions. Vision-sample for the “natural language is the only programming language” thesis.
OpenLI Codex foundation
The agentic runtime that powers OpenMPI’s rationale layer, HIE’s plain-English authoring, and every other OpenLI healthcare product. One security review covers them all.
Where OpenMPI is today — and what’s next.
v0.1.7 is feature-complete for an NHS Acute pilot conversation. The production-activation gate stays explicitly closed pending v0.7+ certifications — we are transparent about that.
Live in v0.1.7
7-layer linkage engine · 4-band decision model · 4 inbound + 3 outbound channels · per-source-pair F-S calibration · statistical threshold proposer · per-source HMAC service-token · 18-hazard log · SHA-512 audit chain · bias regression on 4 protected groups.
Coming next: v0.2 & v0.3
Bitemporal patient history (point-in-time queries) · audit-log monthly partitioning · KMS-wrapped MLLP service tokens · multi-projection golden records · first Cyber Essentials Plus pre-cert dry-run · first production GenAI cost gate open.
v0.7+: production-activation
DSPT cycle 1 · ISO 27001 + Cyber Essentials Plus certifications · DTAC NHS digital pack · IHE Connectathon · DSAR endpoint · DPIA per-tenant template · agent-driven patient verification (NHS App / SMS / email / letter).
PATIENT IDENTITY
Ready to talk about an NHS Acute pilot?
OpenMPI is in pre-release; we are prioritising NHS Acute and ICS pilot conversations. Talk to the team about your patient-identity challenge, the systems you already run, and whether OpenMPI fits the next 12–24 months of your digital programme.