# How do healthcare interoperability vendors sell to NHS trusts, German hospitals and US payers?

> **The short answer:** Interoperability vendors sell integration engines, FHIR APIs and data exchange to healthcare buyers through partners and public tenders, timed to compliance deadlines. US payers buy to meet CMS-0057-F API requirements, primarily by 1 January 2027. NHS trusts and German hospitals buy through frameworks and tenders, and deals stall on DTAC, DSPT or C5 Type 2 assurance.

- Page: https://panelhop.com/industries/healthcare/interoperability-integration-infrastructure
- Section: Home › Industries › Healthcare › Interoperability and integration infrastructure
- Updated 5 October 2026 · Based on Panelhop research, October 2026
- Written for: Vendors of interoperability and integration infrastructure selling to health systems and payers
- Publisher: Panelhop (https://panelhop.com/)

**You pass assurance at one trust, then start again.** You sell the connective layer: integration engines, FHIR APIs and data exchange. An NHS business case missed in December usually waits for April, and DACH tenders arrive with criteria that fit a competitor. In a 2025 survey of German hospital leaders, the largest group, 46%, expects the main KIS tender wave in 2027.

- Typical deal, DACH hospital: €25–500k a year (Illustrative)
- Sales cycle, NHS trust: 3–24 months (Illustrative)
- Buying panel: 5–12 people (Illustrative)

## Interoperability and integration infrastructure · How a deal really moves

**The buyer’s calendar sets your close date. Business cases, assurance, tenders and works councils decide it.** (Illustrative)

With Panelhop: The same deal, timed to funding and tenders. Funding flagged weekly, assurance contacts named before the bid.

One trust or hospital, 5–12 people plus formal approvers and an estimated 3–24 months at NHS trusts, 6–24 months in DACH.

What opens a deal:

- **NHS digital funding round** (Funding · UK)
- **KIS tender wave, 2027** (Technology · DE)
- **EPR award or go-live** (Technology · UK)
- **C5 Type 2 and NIS2** (Security · DE)
- **ICB mergers, 1 April 2027** (Consolidation · UK)
- **EHDS conformity in tenders** (Regulation · EU)

The buyer: **An NHS trust or hospital**. Also German hospitals and HIEs.

Who decides:

| Seat | What worries them | Can veto |
|---|---|---|
| Digital and IT lead | A rip-and-replace that interrupts live clinical systems. | Yes |
| Integration team | A backlog that grows with every new connection. | No |
| CCIO or medical director | Duplicate records and extra clicks. | Yes |
| Information governance | Patient data leaving the jurisdiction. | Yes |
| Clinical safety officer | Patient harm from wrong or missing data. | Yes |
| Procurement | An award challenge, or a supplier missing from the framework. | No |
| Finance and the board | Capital lost because it was not committed by year end. | Yes |
| Works council (DACH) | Staff monitored through logs and dashboards. | Yes |

How the deal moves:

| Stage | Typical time | Where it stalls today | With Panelhop | Service |
|---|---|---|---|---|
| Funding window | 1–6 months | Miss December, and the deal waits for April | Funding rounds, capital plan lines and KIS decisions, flagged weekly | Signal Desk (In-market accounts, weekly): https://panelhop.com/services#signal |
| Partner route | – | – | – | – |
| Market engagement | 1–3 months | – | – | – |
| Assurance | 1–4 months | Assurance starts from zero at every trust | Safety officer, SIRO and security named, assurance pack before the bid | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Tender or call-off | 3–6 months | The tender clock isn’t in your forecast | Publication, clarification and submission dates become deal fields | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Award and standstill | 1–3 months | – | – | – |
| Go-live | – | Go-live waits on the works council and IT | A handoff names the IT owner, supplier contact and works agreement | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Renewal | – | – | – | – |

With Panelhop across the deal: Signal Desk · weekly on what opens a deal (in-market accounts, scored and mapped); Panel Check on the buyer (coverage baselined); Panel Ops · monthly from the last stage back to the next trigger (scores and plays tuned against the baseline).

*Source: Stages, seats, triggers and stalls from Panelhop research, October 2026; [Bundesministerium der Justiz, Gesetze im Internet](https://www.gesetze-im-internet.de/sgb_5/__393.html); [NHS England](https://www.england.nhs.uk/long-read/implementing-integrated-care-board-mergers-and-boundary-changes-to-take-effect-in-april-2026-and-2027/); the services as described on the Services page.*
*Note: Durations, panel sizes and cycle lengths are Panelhop estimates from our research, not measurements.*

## At a glance

| Fact | Value |
|---|---|
| Typical deal, DACH hospital | €25–500k a year (Illustrative) |
| Sales cycle, NHS trust | 3–24 months (Illustrative) |
| Buying panel | 5–12 people (Illustrative) |
| How deals start | Through partners and core-system suppliers, or a contact-sales form |

*Source: Panelhop research, October 2026.*
*Note: Values marked Illustrative are Panelhop estimates from our research, not measurements.*

## Where do vendors lose interoperability deals with NHS trusts and German hospitals?

**Tenders stall when assurance starts at the bid.**

Vendors lose interoperability deals with NHS trusts and German hospitals at the partner route, at the tender and at assurance. After award, integration owners are named late and the first connection rarely spreads. Each leak is a system problem you can see in your own CRM.

**Exhibit 1: Where the pipeline leaks: 5 points across 8 stages.**

1. **Your partner and your rep work the same trust** (stage: Partner route). What you see: A partner and your own rep work the same trust or health system, and neither knows. Why it happens: Partner overlap is not recorded per account, so partner-sourced deals go unattributed and partners are never used to open executive doors.
2. **The tender arrives written around a competitor** (stage: Market engagement). What you see: A DACH tender or NHS notice appears with criteria that fit a competitor. Why it happens: KIS decisions, capital plans and market engagement are not tracked per account. In a 2025 survey of German hospital leaders, the largest group, 46%, expects the main KIS tender wave in 2027.
3. **You build DTAC and DSPT evidence under bid deadline** (stage: Assurance). What you see: Bids stall while DTAC, DSPT or a C5 attestation is assembled under deadline. Why it happens: DTAC, DSPT and C5 evidence is assembled for each bid rather than kept as a ready pack, so every trust or hospital review starts from scratch.
4. **Interfaces wait months for the trust’s IT team** (stage: Go-live). What you see: Interfaces wait months for the trust’s IT team and the core-system supplier. Why it happens: The IT owner and supplier contact are not part of the tender work.
5. **Each new connection restarts security review and funding** (stage: Renewal). What you see: A customer runs your integration in one department or site, and every further connection restarts security review and funding. Why it happens: Nobody keeps a whitespace map by site, department and connected system.

*Source: Panelhop research, October 2026; [Roland Berger](https://www.rolandberger.com/de/Insights/Publications/Krankenhaus-IT-Monitor-2025.html).*

## What triggers healthcare providers and payers to buy interoperability software?

**Compliance dates and core-system changes open the work.**

Healthcare providers and payers buy interoperability software when compliance dates, core-system replacements, cloud and cyber rules, EU data space rules or NHS restructuring force a change. Each one has a published date, so it can sit on the account record months ahead.

**Exhibit 2: The 6 events that open or close the window for a deal.** (Illustrative)

- **CMS-0057-F payer API deadline** (Regulation). What happens: Medicare Advantage, Medicaid, CHIP and federal exchange plans must meet CMS-0057-F’s API requirements, primarily by 1 January 2027, and older Patient Access API contracts do not cover the new scope. Where to spot it: The CMS rule page, plan association vendor showcases and payer developer portals. Window: By our estimate, Q4 2026 is the late-buyer window: plans still behind favour vendors with live, compliant connectivity and short go-lives.
- **KIS tender wave in Germany** (Technology). What happens: In a 2025 survey of German hospital leaders, the largest group, 46%, expects the main KIS tender wave in 2027, as many hospitals face a forced change of core system. Where to spot it: TED and German tender portals and the hospital IT trade press. Window: Adjacent integration work is scoped around each new KIS, so engage before the tender is written.
- **EPR award or go-live in England** (Technology). What happens: An NHS trust signs or goes live with a new EPR, often with national digitisation funding, and re-procures the integrations around it. Where to spot it: Find a Tender and Contracts Finder award notices and trust board papers. Window: By our estimate, adjacent tools are decided 12–24 months before go-live.
- **Cloud and cyber rules in Germany** (Security). What happens: Cloud services processing German health data have needed C5 Type 2 since 1 July 2025, with an exception for newly launched systems, and 3,354 health-sector entities had registered under NIS2 by 30 June 2026. Where to spot it: SGB V cloud rules, BSI NIS2 statistics and supplier questionnaires from German hospitals. Window: Every new cloud contract and every renewal.
- **ICB mergers in England** (Consolidation). What happens: Integrated care boards fell from 42 to 36 on 1 April 2026, with more mergers due on 1 April 2027, so shared care record and population health contracts consolidate. Where to spot it: NHS England merger guidance and ICB board papers. Window: Decisions freeze before a merger and concentrate in the larger board after it.
- **EHDS conformity in EU tenders** (Regulation). What happens: The European Health Data Space phases in EU rules for exchanging health records from 2027 to 2031, and hospital tenders for core systems and integration are expected to ask for EHDS conformity. Where to spot it: EU implementing acts, national eHealth agencies and tender requirements on TED. Window: Implementing acts are due by March 2027; patient summaries and e-prescriptions follow by March 2029, and imaging, results and discharge reports by March 2031.

*Source: Panelhop research, October 2026; [Roland Berger](https://www.rolandberger.com/de/Insights/Publications/Krankenhaus-IT-Monitor-2025.html); [Centers for Medicare & Medicaid Services](https://www.cms.gov/initiatives/burden-reduction/overview/interoperability/policies-regulations/cms-interoperability-prior-authorization-final-rule-cms-0057-f); [Bundesministerium der Justiz, Gesetze im Internet](https://www.gesetze-im-internet.de/sgb_5/__393.html); [BSI – Bundesamt für Sicherheit in der Informationstechnik](https://www.bsi.bund.de/DE/Themen/Regulierte-Wirtschaft/NIS-2-regulierte-Unternehmen/NIS-2-in-Zahlen/nis-2-in-zahlen.html); [Healthcare Leader](https://healthcareleadernews.com/news/changes-to-english-icb-footprints-go-live/); [NHS England](https://www.england.nhs.uk/long-read/implementing-integrated-care-board-mergers-and-boundary-changes-to-take-effect-in-april-2026-and-2027/); [European Commission, DG SANTE](https://health.ec.europa.eu/ehealth-digital-health-and-care/european-health-data-space-regulation-ehds_en).*
*Note: Timings are Panelhop estimates from our research, not measurements.*

## Who signs off on interoperability software at an NHS trust or a German hospital?

**IT sponsors it; governance and safety can stop it.**

At an NHS trust or a German hospital, the CIO or director of digital usually sponsors interoperability software, and finance or the board approves it. Information governance, clinical safety and, in Germany, the works council add approvers who can each stop the deal. At a US health plan, IT and compliance take these seats and utilisation management joins for the prior authorisation API, while CMS-0057-F sets the date.

**Exhibit 3: By our estimate, 5–12 people sit on the panel, and NHS trusts and German hospitals add formal approvers who can veto.** (Illustrative)

At an NHS trust or a German hospital: 5–12 people.

| Seat | Typical titles | Cares about | Worries about | Can veto |
|---|---|---|---|---|
| Digital and IT leadership | CIO, Director of Digital (NHS), Leitung IT (DE) | Fewer interfaces to maintain and standards-based exchange. | A rip-and-replace that interrupts live clinical systems. | Yes |
| Integration team | Integration Team Lead, Interface Analyst | Mapping effort, standards support and fit with the existing integration engine. | A backlog that grows with every new connection. | No |
| Clinical informatics | CCIO (NHS), Ärztliche Direktion (DE) | Clinicians seeing the right data inside their own workflow. | Duplicate records and extra clicks. | Yes |
| Information governance | SIRO (NHS), Caldicott Guardian, Datenschutzbeauftragte (DE) | A signed-off DPIA, DSPT status and a lawful basis for sharing data. | Patient data leaving the jurisdiction. | Yes |
| Clinical safety (NHS) | Clinical Safety Officer | The supplier’s DCB0129 safety case and hazard log. | Patient harm from wrong or missing data. | Yes |
| Procurement | Head of Procurement (NHS trust), Vergabestelle (DE) | A compliant route to market: G-Cloud, an NHS framework or an EU tender. | An award challenge, or a supplier missing from the framework. | No |
| Finance and the board | Director of Finance (NHS trust), Trust Board, Aufsichtsrat | Whole-life cost over a multi-year term within funding rules. | Capital lost because it was not committed by the financial year end. | Yes |
| Works council (DACH) | Betriebsrat, Personalrat | What the system logs about staff, set out in a works agreement. | Monitoring of staff through logs and dashboards. | Yes |

*Source: Panelhop research, October 2026.*
*Note: The panel size is a Panelhop estimate from our research, not a measurement.*

## What do interoperability vendors sell, and to which healthcare buyers?

**You sell the layer every other system depends on.**

Interoperability vendors sell NHS trusts, German hospitals, US payers and health information exchanges the software that moves data between systems, usually without replacing what is already there. Growth runs through ecosystems: marketplaces, integration partner programmes, implementation partners and national data programmes. By our estimate, a US regional health plan deal runs €80k–1.6M a year, often priced per member per month (PMPM); like the DACH hospital range, it is sized on broader software categories.

**What vendors of this type sell**

- Integration engines and interface services
- HL7 FHIR APIs for payer and provider data exchange
- Connections to health information exchanges and national programmes
- Imaging and specialty data integration

**Which health systems and payers buy it**

- US payers meeting CMS-0057-F
- NHS trusts and integrated care boards
- German, Austrian and Swiss hospitals
- Health information exchanges and national data programmes

## How does an interoperability deal move through an NHS trust or a German hospital?

**Assurance and the tender calendar set the pace.**

An interoperability deal at an NHS trust or German hospital moves from a funding window through a partner route, market engagement and assurance to a tender or call-off, award, go-live and renewal. A G-Cloud direct award can close in weeks, while competitive NHS tenders take an estimated 12–24 months. Durations are Panelhop estimates of the buyer’s side.

**Exhibit 4: Stage by stage: what you do, what the health system does, and what changes at the 4 stages where deals stall.** (Illustrative)

| Stage | Typical time | What you do | What the health system does | Today | With Panelhop | Service |
|---|---|---|---|---|---|---|
| Funding window | 1–6 months to a funded business case | Watches capital plans, funding rounds and KIS decisions, mostly by hand. | Writes a business case from September to December, or bids for state (Land) investment or Transformationsfonds money, with KHZG penalty deadlines setting the timing of digital projects. | Capital plans and KIS decisions are spotted late, by hand. Stalls: Missing business-case season. An NHS business case not written by December usually waits for the next April to March year. | Each week, trusts and hospitals with a funding round, a capital plan line or a KIS decision arrive in your CRM, scored, with the signal that fired. | Signal Desk (In-market accounts, weekly): https://panelhop.com/services#signal |
| Partner route | – | Reaches the buyer through EPR or KIS suppliers, integrators and marketplaces. | Asks its core-system supplier and integrator which partners they support. | Nobody knows which partner touches which account. | A required partner field at entry and a role map per tier show which partner and which seats touch each account. | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Market engagement | 1–3 months | Answers pre-tender questions and gives demos. | Runs market engagement and writes requirements, often with an adviser. | You meet the buyer after the tender is drafted. | Trusts and hospitals running market engagement arrive in the weekly list, scored, with the buying group mapped and the signal that fired. | Signal Desk (In-market accounts, weekly): https://panelhop.com/services#signal |
| Assurance | 1–4 months, or a few weeks with the evidence ready | Completes DTAC, DSPT and DCB0129 in the UK, or proves C5 Type 2 and EU hosting in Germany. | Clinical safety, information governance and security sign off, trust by trust. | Assurance evidence is assembled under bid deadline. Stalls: Assurance repeated trust by trust. Each NHS trust runs its own governance and cyber sign-off, so a pass at one trust carries little weight at the next. | Stage exit criteria require the clinical safety officer, SIRO and security contacts and the assurance pack request before the bid. | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Tender or call-off | 3–6 months for an EU tender | Bids in a UK or EU tender, or a framework call-off. | Scores bids on quality and price; German and Austrian public hospitals must tender above the EU threshold, and Swiss hospitals follow their own thresholds. | Tender deals are forecast like any other deal. Stalls: Tender dates outside the forecast. Tender deals are forecast like any other deal, so close dates ignore the publication, clarification and submission timetable. | Stage exit criteria and forecast tracking carry each tender’s publication, clarification and submission dates, so close dates follow the procurement timetable. | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Award and standstill | 1–3 months to sign | Waits through the award notice, the standstill period and board approval. | Publishes the award, observes the standstill and, for large contracts, takes it to the board or supervisory board. | Close dates ignore standstill periods and board dates. | Forecast tracking carries the award notice, standstill and board approval dates as deal fields. | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Go-live | – | Builds interfaces with the trust’s or hospital’s IT team and the EPR or KIS supplier. | Tests, completes clinical safety sign-off (DCB0160) and, in Germany, signs a works agreement. | Integration owners and the works agreement are found after the award. Stalls: Works agreement before go-live. In Germany, any system that could monitor staff needs a works agreement, and the works council can hold go-live until it is signed. | A handoff document, built from the deal, names the IT owner, the core-system supplier contact, the integration scope and the works agreement status. | Leak Fix (We build the fixes): https://panelhop.com/services#build |
| Renewal | – | Plans for re-procurement before the term runs out. | Re-procures when a call-off or framework term ends; G-Cloud 14 call-offs last 48 months at most, and G-Cloud 15, launched in August 2026, allows up to 60 months. | Call-off end dates live in a contracts folder. | Panel Ops checks every week that the renewal tasks tied to call-off and framework end dates have run. It re-scores accounts each quarter and reports against the baseline every month. | Panel Ops (We run it monthly): https://panelhop.com/services#run |

*Source: Panelhop research, October 2026; [Government Commercial Agency](https://www.gca.gov.uk/agreements/RM1557.14); [Bundesministerium der Justiz, Gesetze im Internet](https://www.gesetze-im-internet.de/sgb_5/__393.html); [GOV.UK (Government Commercial Agency)](https://www.gov.uk/government/news/g-cloud-relaunches-with-biggest-upgrade-in-its-history).*
*Note: Typical times are Panelhop estimates from our research, not measurements.*

## How does Panelhop help interoperability vendors sell to providers and payers?

**Track the tender calendar and the assurance gates.**

Panelhop helps interoperability vendors by tracking each account’s tender calendar and assurance gates, then working the stages that leak. Signal Desk (in-market accounts, weekly) watches funding windows and tenders, and a Panel Check (GTM audit) sets a stage-by-stage baseline from your own CRM data. Leak Fix (we build the fixes) and Panel Ops (we run it monthly) do the rest.

What we baseline and report:

1. Target accounts engaged before a tender or call-off is published, against the baseline
2. Days each deal spends in assurance and security review, against the baseline
3. Days from award to go-live across new customers, against the baseline

## What other vendors sell to health systems and payers?

**Other vendor types in healthcare.**

The same health systems and payers buy from these vendor types too, through different panels and pipelines.

- [Patient access and front-office automation](https://panelhop.com/industries/healthcare/patient-access-front-office-automation): Scheduling, intake, eligibility, financial clearance and AI call handling for health systems, hospitals and physician groups.
- [Revenue integrity, coding and claims software](https://panelhop.com/industries/healthcare/revenue-integrity-coding-claims): AI coding, claim scrubbing, charge capture, risk adjustment coding and denial prevention for providers and billing companies.
- [Health system operations and care delivery platforms](https://panelhop.com/industries/healthcare/health-system-operations-platforms): Capacity, patient flow, asset tracking, care coordination, pharmacy and workforce platforms for large health systems.

[The whole healthcare market: segments, panel and pipeline →](https://panelhop.com/industries/healthcare/)

## What do terms like “HL7 FHIR” and “Integration engine” mean?

**The words your buyers use, defined.**

Plain definitions of the terms that come up when you sell interoperability and integration infrastructure to health systems and payers.

- **HL7 FHIR**: Fast Healthcare Interoperability Resources, the current standard for exchanging health data through web APIs. CMS-0057-F requires Medicare Advantage, Medicaid, CHIP and federal exchange plans to use it, and NHS and German programmes use it too.
- **Integration engine**: Middleware that routes and translates messages between clinical systems, so a new application connects once rather than to every system separately.
- **G-Cloud**: The UK public sector framework for cloud software. NHS bodies call off from it directly, so a G-Cloud or NHS framework listing often decides which suppliers a trust can use without a full tender.
- **DCB0129 and DCB0160**: The NHS clinical safety standards for health IT. DCB0129 applies to the supplier’s safety case and hazard log; DCB0160 applies to the trust that deploys the system.
- **C5 Type 2**: An auditor’s report against the BSI’s Cloud Computing Compliance Criteria Catalogue (C5) showing a cloud provider’s controls worked over a period. German providers and insurers need it for cloud processing of health data.
- **Health information exchange (HIE)**: A regional or national network that shares patient records between providers. HIEs and national data programmes buy connectivity, standards mapping and consent tools.

## What do vendors of interoperability and integration infrastructure ask about selling to health systems and payers?

**Answers before your next health system deal.**

### How do interoperability vendors sell software to NHS trusts?

Interoperability vendors sell to NHS trusts through frameworks such as G-Cloud or through competitive tenders. Each trust first runs its own assurance: DTAC, DSPT status, a DCB0129 safety case and a data protection impact assessment (DPIA) signed off by the SIRO or Caldicott Guardian. Business cases are written from September to December and signed from January to March, so vendors need to engage during business-case season.

### Do you need a C5 Type 2 attestation to sell cloud software to German hospitals?

Yes. Cloud services that process health data for German providers and insurers have needed a current C5 Type 2 attestation since 1 July 2025, with a temporary exception for newly launched systems. German hospitals check it in audits and tenders, and they also ask for EU hosting and, where a system could monitor staff, a works agreement signed with the works council.

### How does CMS-0057-F affect vendors selling to health plans?

CMS-0057-F gives vendors a dated buying window at US health plans. Medicare Advantage, Medicaid, CHIP and federal exchange plans must run new FHIR APIs, primarily by 1 January 2027, after prior authorisation provisions took effect in 2026. Older Patient Access API contracts do not cover the new scope. Time outreach to each plan’s readiness and map its compliance, IT and operations owners.

### How long does it take to sell integration software through an NHS or German tender?

A G-Cloud direct award to an NHS trust can close in weeks, while competitive NHS tenders with trust, regional and sometimes national approvals take an estimated 12–24 months. A German EU tender takes about 3–6 months once published, by our estimate, after months of preparation and funding approval. Overall, interoperability deals take an estimated 6–24 months with US payers and DACH hospitals and 3–24 months with NHS trusts.

### How do partner channels affect pipeline for healthcare interoperability vendors?

Partner channels shape much of the pipeline for healthcare interoperability vendors: marketplaces, integration partner programmes, implementation partners and core-system suppliers all touch the same health systems, trusts and hospitals. Record which partner touches each account, so partner-sourced and direct deals are attributed and partners can open doors to executives.

### Who buys interoperability software at a US health plan?

At a US health plan, the IT or compliance leader who owns the CMS-0057-F deadline usually buys interoperability software. IT security and legal then review the deal, and utilisation management and the medical management committee join when it covers the prior authorisation API. Health plans usually buy best-of-breed tools rather than suites, and deadline-driven compliance purchases move faster than the estimated 6–24 months a typical health plan deal takes.

## Sources

**Where the numbers come from.**

Sourced figures link to their source below. Figures marked Illustrative, and figures given as estimates, are inferred from Panelhop research. Vendors appear only as types, never by name.

1. [Centers for Medicare & Medicaid Services, CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) (2024)](https://www.cms.gov/initiatives/burden-reduction/overview/interoperability/policies-regulations/cms-interoperability-prior-authorization-final-rule-cms-0057-f)
2. [Roland Berger, Krankenhaus IT-Monitor 2025 (2025)](https://www.rolandberger.com/de/Insights/Publications/Krankenhaus-IT-Monitor-2025.html)
3. [Bundesministerium der Justiz, Gesetze im Internet, § 393 SGB V: Cloud-Einsatz im Gesundheitswesen (2025)](https://www.gesetze-im-internet.de/sgb_5/__393.html)
4. [BSI – Bundesamt für Sicherheit in der Informationstechnik, NIS-2 in Zahlen (2026)](https://www.bsi.bund.de/DE/Themen/Regulierte-Wirtschaft/NIS-2-regulierte-Unternehmen/NIS-2-in-Zahlen/nis-2-in-zahlen.html)
5. [Healthcare Leader, Changes to English ICB footprints go live (2026)](https://healthcareleadernews.com/news/changes-to-english-icb-footprints-go-live/)
6. [NHS England, Implementing integrated care board mergers and boundary changes to take effect in April 2026 and 2027 (2025)](https://www.england.nhs.uk/long-read/implementing-integrated-care-board-mergers-and-boundary-changes-to-take-effect-in-april-2026-and-2027/)
7. [Government Commercial Agency, G-Cloud 14 (RM1557.14) (2026)](https://www.gca.gov.uk/agreements/RM1557.14)
8. [GOV.UK (Government Commercial Agency), G-Cloud relaunches with biggest upgrade in its history (2026)](https://www.gov.uk/government/news/g-cloud-relaunches-with-biggest-upgrade-in-its-history)
9. [European Commission, DG SANTE, European Health Data Space Regulation (EHDS) (2025)](https://health.ec.europa.eu/ehealth-digital-health-and-care/european-health-data-space-regulation-ehds_en)
- Panelhop research, October 2026: our analysis of the vendors, buying panels, pipelines and triggers for interoperability and integration infrastructure in healthcare, from public sources. Vendor names are not published.

## Next step

Find where your pipeline to health systems and payers leaks.

[Book a GTM audit](https://panelhop.com/book) · [What the Panel Check covers](https://panelhop.com/services#audit)