Search all 478 artefacts by title, document ID or content.
Statement | Family 14, Jurisdiction Variant Sets
Conformity under the EHDS Regulation attaches to the EHR system as placed on the market, not to the hosting arrangement. The analysis is the same in all four deployment models. Where a hospital self-develops or deeply modifies, Section 10 applies.
STM-EU-001 v1.0.0, Last Modified On 01 August 2026, Tier: Public
A hospital buying an operating system in
01 August 2026is buying a system that will still be running when EHR-system conformity becomes a legal obligation. This statement says whatPensieve Labshas built, what it has not, and the date by which it will declare. It claims no conformity that does not yet exist, because none does: the obligations have not yet attached to anybody.
| DM-1 Dedicated | DM-2 Shared | DM-3 Customer Cloud | DM-4 On-Premise |
|---|---|---|---|
| Yes | Yes | Yes | Yes |
Conformity under the EHDS Regulation attaches to the EHR system as placed on the market, not to the hosting arrangement. The analysis is the same in all four deployment models. Where a hospital self-develops or deeply modifies, Section 10 applies.
Pensieve Labs publishesEdsol Edtech Pvt. Ltd. holds no certifications. In every other regulatory conversation that is a
handicap to be compensated for. Under the EHDS Regulation it is not a handicap at all, because nobody
holds a third-party certificate: the regime is built on the manufacturer's own declaration.
That makes EHDS the one European regime in which an uncertified vendor starts level with an incumbent, and
the barrier is engineering and documentation, both of which Pensieve Labs controls, on a calendar
Pensieve Labs can see. The payoff is disproportionate: one EU declaration of conformity makes the
Platform sellable as an EHR system across the internal market.
A vendor that publishes a dated 2029 roadmap in 01 August 2026 is also making a claim it cannot
retract: that it intends to exist in 2029 and expects to be measured against this page.
Regulation (EU) 2025/327 establishing the European Health Data Space entered into force on 26 March 2025. It is a Regulation, so it applies directly in every Member State without transposition, and it extends to the EEA States on incorporation into the EEA Agreement.
Its Chapter III creates, for the first time, a conformity regime for EHR systems placed on the internal market. The obligations on a manufacturer are:
| # | Obligation | Character |
|---|---|---|
| 1 | Meet the essential requirements on interoperability and on logging | Product requirement |
| 2 | Implement the European interoperability component for EHR systems | Engineering |
| 3 | Implement the European logging component for EHR systems | Engineering |
| 4 | Draw up and maintain technical documentation | Documentation |
| 5 | Draw up an EU declaration of conformity | Self-declaration |
| 6 | Affix the conformity marking | Labelling |
| 7 | Register the system in the EU database for EHR systems and wellness applications | Filing |
| 8 | Test the system in a European testing environment | Verification |
| 9 | Post-market obligations, including corrective action and cooperation with market surveillance | Ongoing |
Item 5 is the structural fact. For the ordinary EHR system there is no notified body, no third-party audit and no certification fee. Conformity is declared by the manufacturer on the strength of the technical documentation file and the testing.
This is not a loophole and
Pensieve Labsdoes not present it as one. A false declaration exposes the manufacturer to market surveillance, corrective action, withdrawal and penalties. The point is only that the gate is competence, not procurement of a certificate, which is the gate an engineering-led company can pass.
Secondary commentary on EHDS has been unreliable. The dates below are from Article 105 of the Regulation
and Pensieve Labs states them precisely because a wrong date in a tender response is a credibility
loss that is hard to recover.
| Date | What applies |
|---|---|
| 26 March 2025 | Entry into force |
| 26 March 2027 | General application. National digital health authorities and health data access bodies designated; national contact points for digital health established; MyHealth@EU obligations begin; the Commission adopts implementing acts carrying the technical specifications for the European electronic health record exchange format and the common specifications for EHR systems |
| 26 March 2029 | Chapter III obligations apply to EHR systems intended by the manufacturer to process Priority Category 1 data: patient summary, ePrescription, eDispensation |
| 26 March 2031 | The same, extended to Priority Category 2 data (medical imaging and image reports, laboratory results, discharge reports) and to the EHR systems processing them |
Two corrections Pensieve Labs makes when it hears them:
The specifications Pensieve Labs must actually build to do not exist yet. They arrive as
Commission implementing acts after the general application date. Building the shape now and the
specifics after adoption is the only rational sequence; over-building against a guess is waste.
Pensieve Labs's position today, stated without overreachAs at 01 August 2026:
Edsol Edtech Pvt. Ltd. holds no EU declaration of conformity for an EHR system.Pensieve Labs or for any other
manufacturer.Anything else stated in a sales conversation is wrong and should be reported to
info@pensievelabs.org under POL-GL-059.
Status codes: Built (in production). Designed (architecture settled, implementation scheduled). Shaped: the requirement is understood and the substrate is being built so it can be met without re-architecture. Not started.
| # | Requirement | Status | What exists today | What remains |
|---|---|---|---|---|
| 1 | Structured storage of health data in a form that can be exported to a defined exchange format | Built | A normalised clinical data model with a stable internal identifier per record, and an export path documented in DIS-GL-023 |
Mapping to the European exchange format once its specification is adopted |
| 2 | Interoperability using accepted health data standards | Built, partially | Base-standard support recorded in DIS-GL-029 |
National profile packs, and then the European exchange format |
| 3 | European interoperability component | Shaped | The export and import surfaces are isolated behind a versioned boundary so that a new format is a mapping, not a re-architecture | Implementation against the adopted specification |
| 4 | European logging component: machine-readable logging of access to electronic health data | Designed | Immutable, tamper-evident access logging with the user, the record, the time, the action and the purpose, per DIS-GL-013; exportable to the hospital |
Conform the schema and the export format to the adopted specification; add the retention and query semantics the specification requires |
| 5 | Technical documentation file | Shaped | Architecture, data model, security design, risk management and verification evidence exist as separate artefacts | Restructure them into the EHDS technical-file structure and keep them current as a by-product of ordinary release work |
| 6 | Quality and risk management appropriate to the claim | Built, partially | The management system described in WPR-GL-005, mapped to ISO/IEC 27001:2022 Annex A without certification |
Extend to cover product risk, not only information security |
| 7 | EU declaration of conformity and marking | Not started | None | Drawn up once 1 to 6 are complete and the specifications are adopted |
| 8 | Registration in the EU database | Not started | None | Filed before placing on the market for the applicable priority category |
| 9 | Testing in a European testing environment | Not started | None | When the environment is available |
| 10 | Post-market surveillance and corrective action | Shaped | Vulnerability handling DIS-GL-017, release management DIS-GL-031, incident response POL-GL-112 |
A product-conformity surveillance loop distinct from the security one |
Of everything in Section 5, item 4 is the one with a closing window.
The Regulation requires machine-readable logging of access to electronic health data. Retrofitting a complete, tamper-evident, exportable access log into a hospital operating system that is already live in production hospitals is a major programme: every read path must be instrumented, every historical gap must be explained, and the hospitals themselves must be migrated. Building it into the substrate before the first European deployment is a sprint.
Pensieve Labs therefore builds the logging capability now, ahead of and independently of any
European deal, on the following design commitments:
| # | Commitment |
|---|---|
| L1 | Every access to a health record is logged: who, which record, when, what action, and the purpose asserted |
| L2 | The log is append-only and tamper-evident; the person who performed the access cannot alter the record of it |
| L3 | The log is exportable by the hospital, in a machine-readable form, without Pensieve Labs's cooperation |
| L4 | The log is queryable by the hospital to answer a data subject's access-history request directly |
| L5 | The schema is versioned, so that conforming it to the adopted European specification is a migration and not a rewrite |
| L6 | Log retention is configurable to the national clinical-record period, which in the EEA can exceed a decade |
DIS-GL-013 is the operative disclosure and the source of truth for how logging works. This statement adds
only the EHDS-specific commitments.
Dates are Pensieve Labs's own planning targets, not regulatory deadlines. They are published so that
they can be checked against.
| Phase | Target | Deliverable |
|---|---|---|
| P1: Substrate | Ahead of the first EEA deployment | L1 to L6 in production; the interoperability boundary isolated; DIS-GL-013 and DIS-GL-029 updated to describe them |
| P2: Technical file | As a by-product of the first EEA security review | The technical documentation file assembled in the EHDS structure. Roughly seventy per cent of its content is evidence a European data protection officer and a Nordic sector assessment already demand: writing it twice is the waste; writing it once in the EHDS structure is the arbitrage |
| P3: Specification tracking | From the general application date, ongoing | Monitor the Commission implementing acts for the European exchange format and the common specifications. Within 60 days of adoption of a relevant act, publish an impact note stating the effect on the Platform and on customers |
| P4: Build to specification | After the acts are adopted | Implement the interoperability component and conform the logging component |
| P5: Test and declare | Before the applicable Chapter III date for any priority category Pensieve Labs intends to process |
Test in the European testing environment, draw up the EU declaration of conformity, affix the marking, register in the EU database |
| P6: Surveillance | Continuous thereafter | Post-market conformity surveillance, corrective action, cooperation with market surveillance authorities |
Named owner: the role recorded at Roadmap ehds owner. This is a role with a standing agenda item, not
a task on a list. Where the token is unresolved the obligation is unassigned, and a hospital is entitled to
say so.
Pensieve Labs commits to contractuallyMSA-EU-001 clause 6 makes the following binding, and this statement is incorporated into it:
https://trust.pensievelabs.org; andCommitment 5 is the one that matters commercially. It converts an uncertain 2029 obligation into a dated contractual right the hospital can put in its own risk register.
Claim Pensieve Labs does not make |
Why |
|---|---|
| That the Platform is EHDS-conformant | No conformity regime is yet in application, and no declaration has been made |
| That the Platform is "EHDS-certified" | There is no such certificate. Any vendor claiming one is describing something that does not exist |
| That the Platform meets a specification that has not been adopted | The exchange format and common specifications follow the general application date |
| That using the Platform discharges the hospital's own EHDS obligations | It does not. A health data holder's duties, including making electronic health data available for secondary use where required, are the hospital's |
| That the Platform connects to MyHealth@EU or a national contact point | Out of scope unless the Order Form records it in scope with a specification and a date. DIS-GL-024 states the integration boundary |
| That the Platform is a medical device, or that EHDS conformity says anything about the MDR | Different regimes, different triggers. DIS-EU-028 Section 11 |
10.1 Is the Platform an "EHR system"? On its intended purpose, a system by which health data is
recorded, stored and shared for the provision of health care: yes, in substance, and
Pensieve Labs plans on that basis rather than looking for a definitional escape. A vendor that argues
its hospital system is not an EHR system in order to avoid Chapter III is storing up a market-surveillance
problem.
10.2 Which priority category is in scope for my deployment? Whichever the Order Form records. A deployment that does not process patient summary, ePrescription or eDispensation data has no 2029 exposure; one that adds them later triggers a Change Order and the commitment in Section 8.5.
10.3 What happens if the hospital modifies the system substantially? A person who makes a substantial
modification to an EHR system placed on the market may assume the manufacturer's obligations for it. Where
a hospital builds substantially inside the Platform, the boundary in DIS-EU-028 Section 9 applies by analogy and
the Parties record the allocation in a Change Order.
10.4 What about wellness applications? The Regulation carries a separate, lighter regime for wellness
applications claiming interoperability with an EHR system. Pensieve Labs publishes no wellness
application and makes no interoperability claim of that kind.
| Regime | Relationship |
|---|---|
| MDR (Regulation (EU) 2017/745) | Separate. An EHR system can be in EHDS scope and outside MDR scope simultaneously, which is Pensieve Labs's expected position. DIS-EU-028 |
| GDPR | EHDS does not displace it. Primary use remains governed by the GDPR and national health law; DPA-EU-001 governs the processing |
| NIS2 Directive | Separate. The hospital's security obligations and the flow-down are in STM-EU-002 |
| AI Act (Regulation (EU) 2024/1689) | Separate, and relevant to any AI component. DIS-GL-027 inventories AI/ML features and POL-GL-132 governs them. Pensieve Labs maintains an AI inventory with a risk classification per component |
| Data Act, Data Governance Act | Relevant to secondary use and data intermediation. The hospital is the health data holder; Pensieve Labs is not |
12.1 The Regulation is new and its implementing acts are not adopted. Everything in Section 5 items 3, 4, 7, 8 and 9 is planned against a specification that does not yet exist. Estimates will move.
12.2 EEA incorporation. Application in EEA States that are not Member States follows incorporation into
the EEA Agreement, which has its own timetable. Pensieve Labs does not state a date for it and the
Norway delta pack records the position.
12.3 No competent authority has reviewed this statement. It is Pensieve Labs's own reasoned
position.
12.4 Cost. The engineering and documentation effort for the interoperability and logging components
plus the technical file is material but not certification-scale, and there is no notified-body fee in the
ordinary case. [The current internal estimate is held in the Trust Center roadmap and is not published, because publishing a cost estimate invites it to be read as a price.]
| ID | Artefact |
|---|---|
DIS-GL-013 |
Audit Logging & Traceability Disclosure: the operative logging document |
DIS-GL-029 |
Interoperability & Standards Disclosure |
DIS-EU-028 |
Clinical Safety Boundary Statement (EU) |
MSA-EU-001 |
Master Services Agreement (EU/EEA Variant), clause 6 |
STM-EU-002 |
NIS2 Supplier Statement |
WPR-GL-005 |
Assurance Overview: the certifications position |
DIS-GL-024 |
Integration Boundary Statement |
DIS-GL-027, POL-GL-132 |
AI feature inventory and governance |
Issued by Edsol Edtech Pvt. Ltd..
| Role | Name | Signature | Date |
|---|---|---|---|
| Product owner for EHDS | Roadmap ehds owner |
||
| Authorised signatory | [TO BE SUPPLIED] |
| Version | Date | Author | Summary |
|---|---|---|---|
| 1.0.0 | 01 August 2026 |
Product | First issue. Chapter III obligations, the resolved date table with two corrections to circulating commentary, component-by-component readiness, the logging-component commitments, and the contractual conformity undertaking in MSA-EU-001 clause 6. |