Connecting Bond to athenahealth's athenaOne

What is athenahealth, and who uses it?

athenahealth sells athenaOne, a cloud-based suite that combines an ambulatory EHR (athenaClinicals), practice management and billing (athenaCollector) and patient engagement tools. Per a September 2025 TechTarget profile, the company mainly serves small to medium-sized physician practices and hospitals.^⁠[3] A January 2025 press release from Trially, a recruitment vendor joining the athenahealth Marketplace, cited more than 160,000 providers on the athenaOne network.^⁠[4] By installations, Definitive Healthcare data ranks athenahealth third among ambulatory EHR vendors, behind Epic and eClinicalWorks.^⁠[5]

KLAS Research graded six ambulatory vendors' product suites in its 2025 Complete Look reports. As summarized by TechTarget in June 2025, athenahealth received a B-minus overall, against a C average for the six, and 77% of its customers were satisfied or highly satisfied. Customers praised its interfaces and interoperability; some said specialty workflows need improvement.^⁠[6]

Why does athenahealth matter for physician groups running trials?

A small or medium-sized group on athenaOne may have the patients a study needs but no research informatics team to query the EHR. Then coordinators pre-screen by opening charts one at a time. Bond takes over that reading and hands them a ranked list with reasons attached.

• Identify screens coded data and notes against each inclusion and exclusion criterion, ranks candidates and shows the chart evidence behind each decision.
• Engage calls or texts matched patients, asks the pre-screening questions the chart cannot answer and books visits. Patients are told AI is used and can reach a person at any time: the agent transfers the call live to a coordinator or books a human callback, whichever the site prefers.^⁠[1],[2]

The physician groups page covers staffing and study selection for groups new to research.

What data does Bond read, and which FHIR resources carry it?

As of September 2026, athenahealth's production FHIR server runs FHIR R4 (version 4.0.1) and declares conformance to US Core 3.1.1 and 6.1.0 and to the Bulk Data Access guide, versions 1.0.1 and 2.0.0. Its CapabilityStatement lists 32 resource types. Every resource in the table below supports read, and all but Binary support search. Searches accept an athenaOne practice filter (ah-practice), and Patient searches also accept a department filter (ah-department).^⁠[7]

Notes carry the criteria that coded fields miss: symptom history, response to a prior therapy, a specialist's finding. DocumentReference searches accept category, type and date filters. The CapabilityStatement also declares a Group-level bulk $export operation, an alternative to per-patient searches for loading a whole panel.^⁠[7]

Is Bond on the athenahealth Marketplace?

No. The Marketplace is athenahealth's catalog of third-party apps. A January 2025 release put it at over 500 solutions across more than 60 medical specialties and capabilities, and recruitment tools are listed there: Trially joined the program that month.^⁠[4]

Bond connects via athenahealth's standards-based FHIR APIs instead, under each practice's own authorization. As of September 2026, athenahealth's published SMART configuration lists the client_credentials grant and private_key_jwt client authentication, the combination the SMART Backend Services pattern uses for server-to-server access.^⁠[8]

What does the practice need to do?

Most of the work sits with whoever manages athenaOne for the group: an IT lead, a practice administrator or an outside consultant. Bond supplies the list of resources it needs and does the configuration.

1. 1

   Sign the BAA

   No PHI moves until the business associate agreement is signed.

2. 2

   Approve API access

   Authorize Bond's application for the practice's athenaOne data, following the steps in your athenahealth agreement. Your athenahealth account contact can confirm what applies to your contract.

3. 3

   Set the scope

   Name the practice and the departments to include. athenahealth's Patient search filters by both, so screening can start from only the clinics running the study.^⁠[7]

4. 4

   Run the security review

   Your reviewer checks the resource list above and Bond's controls. Bond answers the questionnaire and shares its Trust Center.^⁠[1]

5. 5

   Test on real charts

   Coordinators check a sample of matches against the chart, including which note types come through. The validation process describes this step.

How long does the athenahealth connection take?

Bond's published estimate for a full EHR integration is 48 hours, depending on the EHR, the IT review and the interface method.^⁠[1] In the implementation plan, the security review and the EHR connection come first, while criteria and outreach scripts are configured in parallel.

How is PHI protected, and what is not integrated today?

Bond is HIPAA compliant and SOC 2 Type I compliant, and its SOC 2 Type II and ISO 27001 audits are underway.^⁠[2] Bond signs a BAA, encrypts data in transit and at rest (AES-256 where applicable), and uses role-based access, SSO support, audit logging and penetration testing, documented in its Trust Center.^⁠[1] The security page shows the full data flow.

Not integrated today

• Writing to the chart. For every resource in the data table, athenahealth's CapabilityStatement lists read and search only, as of September 2026.^⁠[7] Bond does not file notes, flags or orders in athenaOne.
• Inside athenaOne. Bond does not run as an embedded app in the athenaOne screen. Coordinators review matches in Bond's dashboard.
• The athenaOne schedule. Bond books screening visits in the site's calendar, not in athenaOne scheduling.
• Portal messaging. Bond does not message patients through athenahealth's patient portal. Outreach is by voice and text.
• Research status in the chart. Study status goes to the CTMS or a Google Sheet, not to athenaOne.
• Proprietary athenaOne APIs. Bond's standard path is FHIR R4. An HL7 v2 feed or an aggregator is an option where a practice already has one.