Platform
Control every change, across every facility.
Govern requests and approvals, prove every decision, and hand off approved changes through controlled channels.
Govern
Role-based requests and approvals
- Requests with a field-level diff
- Requesters add, update or inactivate charges. Requests move through ordered steps, such as coding review and then finance. Reviewers approve, return or deny with a recorded reason. Nothing reaches the chargemaster until final approval.
- Configurable, versioned workflows
- Administrators define steps and per-step field rules in a form-based designer, so finance can sit at whichever step your policy requires. Active versions can't be edited, and each request stays on the version it started on.
Control
Field-level controls, enforced on the server
- Locked by role, step and facility
- Each step controls which fields a reviewer can change. Locked fields are shown in the screen and enforced on the server, so the rule holds even outside the screen.
- Approve from anywhere, with delegation
- Reviewers decide from a mobile-optimized queue with field diffs and lock explanations. Time-bound delegation shows who is acting for whom.
Multi-facility
Propagation with preserved overrides
- Corporate standards, facility instances
- Corporate charge standards with facility-level instances across your hierarchy of corporate, regions and sites. Effective-dated versions keep prior history.
- Local differences kept
- Corporate changes go out to the facilities you select while applicable local overrides are preserved. A charge can be inactivated at one site without touching the corporate item or other sites.
Prove
Tamper-evident audit chain
- Verified, not taken on trust
- Every governed event is appended to a per-tenant SHA-256 hash chain. Audit records can't be updated or deleted, and verification shows whether the chain is valid.
- Tenant isolation and access control
- Database row-level security on every tenant-owned table keeps each tenant's data separate. Admin pages are role-guarded, and users can't raise their own permissions.
Connect
Evidence exports and governed delivery
- Evidence for auditors
- Auditors download a request's proof as JSON, CSV or a PDF proof package, with hash-verifiable manifests and tracked, repeatable export runs.
- Two governed paths downstream
- Scoped CSV and XLSX exports for any downstream system, and EHR connectivity over FHIR and HL7 delivered through Vellum's integration layer, scoped in your SOW. Both are limited to authorized facilities and recorded in the audit trail.
- One integration layer for every system
- Vellum's integration layer delivers your EHR and billing connections, scoped in your SOW. Endpoint credentials are never stored in Vellum.
Operational dashboard
See requests in flight, queues and cycle times.
Administrators manage users and access, roles, facilities and workflows, and see propagation and export activity.
The complete Vellum platform
One governance model, every domain.
Enterprise identity, connected downstream systems through Vellum's integration layer, deeper administration and intelligent review, configured for your systems, facilities and policies.
Enterprise single sign-on
Your teams sign in through your organization's identity provider, with roles and facility scope mapped to Vellum permissions.
EHR connectivity over FHIR and HL7
Vellum's integration layer delivers your EHR and billing connections, scoped in your SOW, with delivery and acknowledgment tracking.
Reconciliation and drift detection
Vellum compares connected systems with the governed record, flags mismatches and drift, and routes each exception to resolution.
Full chargemaster search and bulk import
Bring your existing chargemaster in through validated bulk import, then search and browse it across facilities.
Propagation and override administration
Operators launch, preview and approve corporate-to-facility propagation, and manage facility overrides and their effective dates.
Delegation, notifications and escalation
Administrators set up and revoke delegations. Reviewers are notified when a decision is waiting, and overdue requests escalate.
Signed manifests and external audit anchoring
Evidence packages carry signed export manifests, and audit-chain checkpoints are anchored outside Vellum, so verification doesn't depend on Vellum alone.
Rules-based checks and AI-assisted prioritization
Validation rules catch likely errors before approval, and AI-assisted suggestions help reviewers prioritize. People make every decision.
Gross-charge export for your CMS file
Export approved gross charges by effective date as the gross-charge component of your CMS machine-readable file.
Item master and formulary
Extend the same request, approval and evidence model to item master and formulary data.
Each capability uses the same governed request, role-based approval, field-level control and tamper-evident evidence trail as the core platform. Capabilities described here, including price tracking, facility price comparison and variance flags, are delivered and configured for your health system, with scope set out in your SOW. Information current as of October 2026.
Walk through the platform on your own workflow.
We'll cover request, approval and evidence for your facilities with your finance, revenue integrity, chargemaster, compliance and IT teams.