--- title: Verifiable Trust for Healthcare Data Exchange | Onyx + healthKERI description: See how Onyx and healthKERI demonstrated HL7 FAST Security using UDAP and vLEI to verify who is requesting healthcare data, on whose authority, and for what purpose. --- [Skip to content](https://info.onyxhealth.io/trusted-exchange#main-content) ![](https://info.onyxhealth.io/hubfs/Onyx%20Logo%20White.svg)Homepage - [Default HubSpot Blog](https://onyxhealth-8504347.hs-sites.com/blog?hsLang=en) Get started - [Default HubSpot Blog](https://onyxhealth-8504347.hs-sites.com/blog?hsLang=en) Get started ![Onyx](https://info.onyxhealth.io/hubfs/onyx-logo-white%202.svg)![healthKERI](https://info.onyxhealth.io/hubfs/Landing%20Pages/Logos/healthKERI-logo-reversed.png) [Request a walkthrough →](https://info.onyxhealth.io/trusted-exchange#walkthrough) HL7 FAST Security · UDAP + vLEI # Verifiable trust for healthcare data exchange See HL7 FAST Security with UDAP and vLEI in action. Healthcare organizations need more than secure connections. They need to verify who is requesting data, under whose authority, and for what purpose, before enabling access. [Request a technical walkthrough](https://info.onyxhealth.io/trusted-exchange#walkthrough) Jointly demonstrated by Onyx and healthKERI, with participation from DirectTrust, the CARIN Alliance and GLEIF. The challenge ## Trust doesn't automatically travel with the data. As healthcare exchange expands across APIs, networks and organizations, establishing trust remains fragmented. Verifying the organization behind a request can require manual onboarding, individual agreements and disconnected identity systems. A secure connection alone doesn't establish who is behind it, or whether they have authority to act. Onyx and healthKERI have demonstrated how verifiable organizational credentials can strengthen that foundation while leaving access decisions with the organization holding the data. How the demonstration works ## Four steps from verifiable identity to secure API registration 01 ### Issue A credential issuer provides a verifiable role credential to the requesting organization. 02 ### Present The requesting organization presents its credential as part of establishing an API connection. 03 ### Verify and approve Onyx verifies the credentials and evaluates role and purpose. The data holder decides whether to approve access. 04 ### Register Following approval, the requesting system completes UDAP dynamic client registration. Verifiable identity does not automatically grant access. The data holder keeps control over approval and authorization. Why it matters for health plans ## Know who is asking before the data moves ### Verify organizational identity Establish cryptographically verifiable evidence of the legal entity behind an exchange request. ### Validate delegated authority Evaluate the role and authority of the person or system acting on an organization's behalf. ### Support scalable onboarding Reduce dependence on fragmented directories and manual identity verification. ### Prepare for broader API exchange A reusable trust approach for payer-to-payer exchange, provider access and delegated partners. Part of a broader industry shift This demonstration is part of the VITAL Initiative (Verifiable Identity and Trust Automation Layer), an industry pilot of open, standards-based organizational identity for healthcare. It builds on HL7 FAST Security and work to advance digital identity across healthcare. It also comes as DirectTrust and GLEIF develop a Qualification Agent model to support broader adoption of verifiable organizational identity in U.S. healthcare. [Read the DirectTrust–GLEIF announcement](https://www.gleif.org/en/newsroom/press-releases/directtrust-and-gleif-partner-to-advance-verifiable-organizational-identity-to-u-s-healthcare)[Explore HL7 FAST Security](https://hl7.org/fhir/us/udap-security/STU2/) Request a technical walkthrough ## See trusted exchange in action Explore how Onyx and healthKERI demonstrated verifiable organizational identity using FAST Security, UDAP and vLEI, and discuss its relevance to your organization with the Onyx team. ![Onyx](https://info.onyxhealth.io/hubfs/onyx-logo-white%202.svg)![healthKERI](https://info.onyxhealth.io/hubfs/Landing%20Pages/Logos/healthKERI-logo-reversed.png) [onyxhealth.io](https://onyxhealth.io?hsLang=en) [![](https://info.onyxhealth.io/hubfs/Onyx%20Logo%20White.svg)](http://onyxhealth.io?hsLang=en) - [Default HubSpot Blog](https://onyxhealth-8504347.hs-sites.com/blog?hsLang=en) --- Privacy Policy · Legal · © 2026 Onyx Technology. All rights reserved.