Resources · Healthcare EDI

HIPAA and HL7 coverage

Healthcare exchanges data in three families of standards: HL7 v2 messages between clinical systems, FHIR resources exchanged through APIs, and the X12 transactions HIPAA requires for claims, eligibility and payment. This page lists what ECOM's B2B gateway covers in each, and which parts are confirmed with you first.

HL7
v2 (2.9 validation) and FHIR
Transport
MLLP over TCP/IP, HTTPS
HIPAA
X12 HIPAA validation
Documents
Handled by PRISM-SmartConvert
Entries listed
22
HIPAA and HL7 message mapA map of healthcare coverage: HL7 and FHIR capabilities, X12 HIPAA transactions, documents handled by SmartConvert, and items scoped first.HIPAA and HL7 message map22 entries in 4 groupsHL7 and FHIR coverage7 entriesValidation, transformation and connectivityfor HL7 v2 and FHIR.ValidateMapTransformConvertAuthorizeValidateConnectX12 HIPAA transactions8 entriesThe X12 transactions HIPAA adopts. X12HIPAA validation checks them against theHIPAA implementation guides.270 / 271276 / 277278820834835837P / 837I / 837D999Documents and attachments4 entriesHealthcare also runs on documents thatare not messages. PRISM-SmartConverttakes care of them.EmailPDFWordExcelScoped first3 entriesThese need a conversation before they arepromised.AdvancedNCPDPBinary
HIPAA and HL7 message mapA map of healthcare coverage: HL7 and FHIR capabilities, X12 HIPAA transactions, documents handled by SmartConvert, and items scoped first.HIPAA and HL7 message map22 entries in 4 groupsHL7 and FHIR coverage7 entriesValidation, transformation and connectivity forHL7 v2 and FHIR.ValidateMapTransformConvertAuthorizeValidateConnectX12 HIPAA transactions8 entriesThe X12 transactions HIPAA adopts. X12HIPAA validation checks them against theHIPAA implementation guides.270 / 271276 / 277278820834835837P / 837I / 837D999Documents and attachments4 entriesHealthcare also runs on documents that arenot messages. PRISM-SmartConvert takescare of them.EmailPDFWordExcelScoped first3 entriesThese need a conversation before they arepromised.AdvancedNCPDPBinary

Each colored card is one part of the healthcare coverage: HL7 and FHIR, the X12 HIPAA transactions, documents handled by SmartConvert, and the items that are scoped first.

Expand diagram Download SVG

Overview

What HIPAA and HL7 is

HL7 version 2 is the pipe-delimited message format that hospital systems, laboratories and imaging systems use to send admissions, orders and results to one another. It usually travels over a plain TCP/IP connection wrapped in the Minimal Lower Layer Protocol (MLLP). FHIR is HL7's newer standard: data is exchanged as resources, in JSON or XML, through web APIs.

HIPAA adds a third family. The transactions it adopts for claims, eligibility, claim status, prior authorization, enrollment and payment are X12 transaction sets, so they are exchanged like any other X12 EDI, with extra validation against the HIPAA implementation guides.

ECOM's B2B gateway validates HL7 2.9 messages, transforms HL7 v2 and converts it to and from FHIR, validates FHIR and handles FHIR prior authorization, connects over MLLP, and validates X12 HIPAA transactions. Emails, PDFs, Word and Excel files are converted to structured data by PRISM-SmartConvert, and the gateway then carries the result.

  • Providers and health systems

    Connect clinical systems that speak HL7 v2 to partners and to FHIR-based applications.

  • Payers and clearinghouses

    Exchange X12 HIPAA claims, eligibility and remittance transactions, and FHIR prior authorization.

  • Healthcare software vendors

    Add HL7, FHIR and HIPAA connectivity to a product without building every connection yourself.

HL7 and FHIR coverage

Validation, transformation and connectivity for HL7 v2 and FHIR.

Item Capability What it is for Notes
Validate HL7 2.9 schema validation Checks HL7 v2.9 messages against the schema before they are used.
Map Mapping, FHIR and connectivity Maps HL7 and FHIR data to and from your systems and connects them to partners.
Transform HL7 v2 transformation Transforms HL7 v2 messages to and from other formats.
Convert HL7 v2 ↔ FHIR Converts HL7 v2 messages to FHIR and FHIR back to HL7 v2.
Authorize FHIR prior authorization Exchanges prior authorization requests and responses through FHIR.
Validate FHIR validation Checks FHIR resources against the rules they must follow.
Connect MLLP over TCP/IP Sends and receives HL7 v2 messages over TCP/IP with the Minimal Lower Layer Protocol.

X12 HIPAA transactions

The X12 transactions HIPAA adopts. X12 HIPAA validation checks them against the HIPAA implementation guides.

Item Capability What it is for Notes
270 / 271 Eligibility inquiry and response Ask whether a patient is covered, and the answer. X12 HIPAA validation
276 / 277 Claim status inquiry and response Ask where a claim stands, and the answer. X12 HIPAA validation
278 Prior authorization and referral Request and response for services that need approval. X12 HIPAA validation
820 Premium payment Payment of health insurance premiums. X12 HIPAA validation
834 Benefit enrollment and maintenance Enroll or change members in a plan. X12 HIPAA validation
835 Claim payment and remittance advice Explains how a claim was paid. X12 HIPAA validation
837P / 837I / 837D Health care claims Professional, institutional and dental claims. X12 HIPAA validation
999 Implementation acknowledgment Confirms that an X12 file was received and whether it passed the syntax check.

Documents and attachments

Healthcare also runs on documents that are not messages. PRISM-SmartConvert takes care of them.

Item Capability What it is for Notes
Email Emails Messages and attachments that carry orders or requests. PRISM-SmartConvert
PDF PDF files and scanned images Forms and documents that arrive as images or PDFs. PRISM-SmartConvert
Word Word documents Documents in Word format. PRISM-SmartConvert
Excel Excel spreadsheets Data sent in spreadsheets. PRISM-SmartConvert

Scoped first

These need a conversation before they are promised.

Item Capability What it is for Notes
Advanced Advanced HIPAA compliance validation Validation beyond the X12 HIPAA checks above. Confirmed during scoping
NCPDP NCPDP Pharmacy standards. Confirmed during scoping
Binary Proprietary binary files Carrying a file does not establish parsing or semantic validation. Confirmed during scoping

Structure

Three standards, three ways to exchange

An HL7 v2 message is a set of segments (MSH for the header, PID for the patient, OBR and OBX for orders and results) separated by line breaks and divided into fields by a pipe character. An MLLP frame wraps each message with start and end bytes so the receiver knows where it ends.

A FHIR resource, such as a Patient, a Coverage or a ServiceRequest, is a JSON or XML document exchanged with REST calls. Prior authorization with FHIR uses resources in place of the X12 278, and the gateway can sit between the two worlds.

The gateway keeps one internal view of the data, so an HL7 v2 admission, a FHIR Patient and an X12 834 enrollment can all feed the same ERP or clinical application.

From an HL7 v2 message to FHIRFive steps: receive an HL7 v2 message over MLLP, validate it against the 2.9 schema, transform it, convert it to FHIR, and validate the FHIR resource before delivery.From an HL7 v2 message to FHIRHow the gateway sits between clinical systems and FHIR-based partners1ReceiveHL7 v2 messageover MLLP onTCP/IP.MLLP2ValidateCheck the messageagainst the HL7 2.9schema.HL7 2.93TransformMap the segmentsand fields to theinternal view.HL7 v24ConvertCreate the FHIRresource.HL7 v2 ↔ FHIR5Check anddeliverValidate the FHIRresource and send itto the partner.FHIR
From an HL7 v2 message to FHIRFive steps: receive an HL7 v2 message over MLLP, validate it against the 2.9 schema, transform it, convert it to FHIR, and validate the FHIR resource before delivery.From an HL7 v2 message toFHIRHow the gateway sits between clinical systemsand FHIR-based partners1ReceiveHL7 v2 message over MLLP on TCP/IP.MLLP2ValidateCheck the message against the HL7 2.9schema.HL7 2.93TransformMap the segments and fields to theinternal view.HL7 v24ConvertCreate the FHIR resource.HL7 v2 ↔ FHIR5Check and deliverValidate the FHIR resource and send itto the partner.FHIR

A clinical system sends an HL7 v2 message over MLLP. The gateway validates it, converts it to a FHIR resource, validates the result and delivers it to the partner's API. The reverse path works the same way.

Expand diagram Download SVG

HL7 v2, FHIR and X12 HIPAA side by sideA table comparing HL7 v2, FHIR and X12 HIPAA by typical use, format and transport.HL7 v2, FHIR and X12 HIPAA side by sideHow the three healthcare standards differHL7 v2Clinical messagesFHIRAPI resourcesX12 HIPAAAdministrativeTypical useAdmissions, orders, resultsPatient data and priorauthorizationClaims, eligibility, paymentFormatPipe-delimited segmentsJSON or XML resourcesX12 segmentsTypical transportMLLP over TCP/IPHTTPS APIsAS2, SFTP, HTTPSChecked againstHL7 2.9 schemaFHIR rulesHIPAA guidesECOM's gateway handles all three together.
HL7 v2, FHIR and X12 HIPAA side by sideA table comparing HL7 v2, FHIR and X12 HIPAA by typical use, format and transport.HL7 v2, FHIR and X12 HIPAAside by sideHow the three healthcare standards differHL7 v2FHIRX12 HIPAATypical useHL7 v2: Admissions, orders, resultsFHIR: Patient data and prior authorizationX12 HIPAA: Claims, eligibility, paymentFormatHL7 v2: Pipe-delimited segmentsFHIR: JSON or XML resourcesX12 HIPAA: X12 segmentsTypical transportHL7 v2: MLLP over TCP/IPFHIR: HTTPS APIsX12 HIPAA: AS2, SFTP, HTTPSChecked againstHL7 v2: HL7 2.9 schemaFHIR: FHIR rulesX12 HIPAA: HIPAA guidesECOM's gateway handles all threetogether.

Clinical systems use HL7 v2, modern applications use FHIR, and payers and providers use X12 HIPAA for administrative transactions. The gateway handles all three.

Expand diagram Download SVG

Versions

Versions

HL7 v2 has many releases, FHIR is published in numbered releases, and the HIPAA transactions follow named X12 versions. These are the ones the coverage names.

ItemDetail
HL7 v2Schema validation for HL7 v2.9
FHIRThe FHIR release your partner uses is confirmed during scoping
X12 HIPAAThe HIPAA transaction sets, validated against the HIPAA implementation guides
MLLPMinimal Lower Layer Protocol over TCP/IP

ECOM B2B Gateway

How ECOM handles HIPAA and HL7

The gateway receives the message over the connection the partner uses, checks it, and turns it into the format the next system needs.

  1. 1

    Connect

    Receive over MLLP on TCP/IP, HTTPS, AS2 or SFTP, depending on the partner.

  2. 2

    Validate

    Check HL7 2.9 schemas, FHIR resources or X12 HIPAA rules.

  3. 3

    Transform

    Convert HL7 v2, FHIR and X12 to and from your formats.

  4. 4

    Deliver

    Route to your application or partner and return acknowledgments.

How the gateway handles HIPAA and HL7Four steps showing how ECOM's B2B gateway handles HIPAA and HL7: connect, validate, transform, deliver.How the gateway handles HIPAA and HL7From the partner connection to your ERP1ConnectReceive over MLLP onTCP/IP, HTTPS, AS2 orSFTP, depending on thepartner.Step 12ValidateCheck HL7 2.9 schemas,FHIR resources or X12HIPAA rules.Step 23TransformConvert HL7 v2, FHIR andX12 to and from yourformats.Step 34DeliverRoute to your application orpartner and returnacknowledgments.Step 4
How the gateway handles HIPAA and HL7Four steps showing how ECOM's B2B gateway handles HIPAA and HL7: connect, validate, transform, deliver.How the gateway handlesHIPAA and HL7From the partner connection to your ERP1ConnectReceive over MLLP on TCP/IP, HTTPS,AS2 or SFTP, depending on the partner.Step 12ValidateCheck HL7 2.9 schemas, FHIRresources or X12 HIPAA rules.Step 23TransformConvert HL7 v2, FHIR and X12 to andfrom your formats.Step 34DeliverRoute to your application or partner andreturn acknowledgments.Step 4

The gateway receives the message over the connection the partner uses, checks it, and turns it into the format the next system needs.

Expand diagram Download SVG

Good to know

What this page does and does not cover

  • The coverage list for HL7 and FHIR is as supplied by ECOM. The HIPAA transaction list shows the X12 transactions HIPAA adopts; the exact versions and implementation guides ECOM validates for each partner are confirmed during scoping.
  • The standards' own specifications are the authority for message content. The partner's companion guide decides which fields and codes it requires.
  • PRISM-SmartConvert converts emails, PDFs, Word and Excel files into structured data; it is a separate ECOM product from the gateway.

Sources, read November 3, 2026

Frequently asked questions

Which HL7 capabilities does ECOM cover?

HL7 2.9 schema validation, mapping between HL7 and your systems, HL7 v2 transformation, conversion between HL7 v2 and FHIR, FHIR validation, FHIR prior authorization, and MLLP over TCP/IP for connectivity.

Do you handle HIPAA X12 transactions?

Yes. The gateway validates the X12 transactions HIPAA adopts, such as the 837 claims, 835 remittance, 270/271 eligibility, 276/277 claim status, 278 prior authorization and 834 enrollment. Exact versions and implementation guides are confirmed during scoping.

What about emails, PDFs, Word and Excel files?

PRISM-SmartConvert takes care of them: it converts emails, PDFs, Word and Excel files into structured data that the gateway then validates and delivers.

What is MLLP?

The Minimal Lower Layer Protocol, the simple framing used to send HL7 v2 messages over a TCP/IP connection. Many hospital systems and interface engines require it.

Connect a HIPAA and HL7 partner

Tell us which HIPAA and HL7 messages and versions your partner requires. An ECOM specialist confirms the connection, the map and the test plan.