The healthcare backend you'd build if you had six more months.

Fire Arrow is a FHIR application backend — like Supabase for digital health. Auth, RBAC, GraphQL, care workflows, and real-time subscriptions out of the box. Ship your product this week.
HL7 FHIR
ISO 27001 Ready
GraphQL API
EU EHDS Aligned
The healthcare backend problem
Three things every digital health team builds from scratch — and why they shouldn't have to.
You model data, then remodel it.
Custom schemas work until you need to connect to an EHR, a lab, or a payer. FHIR gives you 150+ resource types — and every external system already speaks it.
You build auth twice.
Once for your API, once for the compliance audit. Fire Arrow maps identity to FHIR resources — one config file, one source of truth, across GraphQL and REST.
You wait months for certification.
Pre-certified components (SOC-2 pathway, ISO 27001 ready) mean you start the process on day one, not month six.

Not sure where to start?

Book a free 30-minute call with one of our engineers. We'll talk through your healthcare backend architecture — no pitch, no strings attached.

Book a free call

What you can build

Real-world recipes with step-by-step documentation and downloadable whitepapers.

Give your AI clinical context — without giving it the keys

An LLM agent queries FHIR data using the clinician's own token. The model never holds credentials, never calls the server directly, and only sees what the asking user is allowed to see.

We also maintain a library of pre-built healthcare AI agents with strong eval sets — cohort analysis, vaccination recommendations, EMR summarization, and more. Use them as a baseline or build your own.

Talk to us about AI

Schedule, track, and alert on patient questionnaires automatically

Define a PHQ-9 schedule once. Fire Arrow creates Tasks on the right days, sends push notifications when they're due, and triggers alerts when scores cross a threshold.

Fire Arrow web UI showing a CarePlan with scheduled PHQ-2 questionnaire Tasks on a timeline

Same server, two audiences, zero data leakage

Run a clinical trial where investigators see full PHI and sponsors see anonymized data. No export step, no second system. Property filters and identity filters do the work at query time.

Fire Arrow Server Same data, different views Investigator Full PHI access Sponsor Anonymized data Patient: Jane Doe DOB: 1985-03-14 Patient: ******** DOB: null

Tenant isolation that lives in the data, not the infrastructure

Clinic A and Clinic B share one server but can never see each other's patients — not through search, not through GraphQL, not through a bug. Cross-clinic specialists get access via CareTeam, scoped to individual patients.

Clinic A Patients: Alice, Bob Dr. Smith (staff) Clinic B Patients: Carol, Dave Dr. Lee (staff) Dr. Garcia (specialist) CareTeam access to Alice only Fire Arrow Server

Medication reminders that write themselves

Model a chronic-care medication plan as a FHIR CarePlan. Fire Arrow materializes timed Tasks, fires webhooks for push notifications, and tracks completion — all from a single MedicationRequest.

08:00
Lisinopril 10mg
Task → push notification → completed
20:00
Amlodipine 5mg
Task → push notification → completed
08:00
Lisinopril 10mg
Task created → awaiting notification

How it works

From zero to production in three steps.
01
Define your data model
Pick from 150+ FHIR resource types. No schema migrations, no API versioning.
02
Configure access in one file
Roles, compartments, multi-tenancy, anonymization rules. Declared, not coded.
03
Deploy to production
Docker on your infrastructure or ours. Same product, same support.

Everything you need, nothing you don't

A complete backend for healthcare applications — certified, configurable, and ready to ship.
FHIR-Native Store
150+ resource types, zero schema design
GraphQL + REST APIs
Read via GraphQL, write via FHIR REST, same authorization
OAuth/OIDC + API Tokens
Vendor-neutral auth, mapped to FHIR identity resources
RBAC with Compartments
Patient, practitioner, and organization-level access control
CarePlan Engine
Scheduled activities, automated Tasks, webhooks on state changes
Real-Time Subscriptions
REST hooks, email, WebSocket, message queues
HFQL Analytics beta
SQL-like tabular queries with full authorization
Anonymization Filters
Property filters and identity filters for blinded access

Ready-made AI agents for healthcare

We maintain a library of pre-built LLM agents — each with strong eval sets and ready to use as a baseline for your project.

Use them as-is, adapt them, or build your own agents on Fire Arrow with any framework. The library is a head start, not a lock-in.

Talk to us about AI

Two editions

Choose the edition that matches your starting point.
Fire Arrow Server
The complete backend
Full self-contained FHIR backend
Integrated store (HAPI + PostgreSQL)
GraphQL read + FHIR REST read/write
CarePlan engine, subscriptions, API tokens
Web admin UI
Fire Arrow Core
The lightweight facade
GraphQL facade for your existing FHIR server
Auth + RBAC + GraphQL on managed infrastructure
Works with Azure Health Data Services and others
Lightweight: 100–200 MB per instance, no database
See the full comparison in our docs

Two deployment modes, one engagement model

Fire Arrow deploys into your infrastructure or ours — always with Evoleen alongside you. Let's scope it together.
Your Infrastructure
  • Deploy Fire Arrow within your own security perimeter
  • Perpetual license, you manage ops
  • Evoleen provides deployment support and ongoing access to the team
Our Infrastructure
  • We run Fire Arrow for you in a fully certified environment (ISO 27001, SOC-2 pathway)
  • Same product, zero ops burden
  • Managed updates, monitoring, backups
Let's scope your project
Or reach out directly: hello@evoleen-technology.com
Just want to talk architecture? Book a free 30-minute call — no commitment.