EpiTrax for Public Sector: Public Health Disease Surveillance System

EpiTrax is a disease surveillance system designed to monitor all reportable health conditions. Jurisdictions have successfully configured their EpiTrax systems to monitor a wide range of conditions and can rapidly add new ones as they emerge, such as during public health crises.

Public health investigators gain a more comprehensive view of a person’s health and leverage insights from prior case investigations by removing data silos. All previously collected contact information is readily accessible for new investigations.

EpiTrax employs fine-grained access control settings to ensure data is visible only to staff with a need to know:

• Condition Access
• Agency (Jurisdiction) Access
• Functionality Access (e.g. data exporting)

Each occurrence or potential occurrence of a reportable condition is represented by an Event Record in EpiTrax, which can be classified as a Confidential Morbidity Report (CMR) or a Contact Record. As a person-centric system, EpiTrax links all Event Records (CMR or Contact) to a Person Record.

Admin users can configure custom queues and event tags for select conditions and agencies, enabling users to search and filter records efficiently.

In the EpiTrax task system, users can assign tasks to themselves or others from within an event. Tasks can be assigned to multiple investigators, regardless of the chief investigator. Each task includes a title, description, category, priority, and due date. Investigators receive notifications of new task assignments either by email or via the highly configurable dashboard, which lists all tasks according to user-defined criteria. Custom task filters can be adjusted in real time. Users can select multiple investigators, enabling managers to view all tasks assigned to their teams and allowing investigators to assist colleagues when others are out of the office. All tasks with assigned due dates are also displayed in a calendar view.

EpiTrax includes modules for outbreaks, data export, person and event merge, and configurable forms and questionnaires for each condition, with conditional logic based on prior responses. Forms draw from a question bank using value sets from CDC PHIN VADS.

All actions are logged, and audit logs are searchable by authorized users. ELR HL7 messages and eCR XML messages are ingested through Mirth Connect or BridgeLink and processed by the EMSA rules engine. The system integrates with NIOCCS, IIS, vital records, geocoding APIs, email services, and data lake houses. Authentication is single sign-on across the suite, with multi-factor authentication and federation with Active Directory and other identity providers.

Designed with flexibility in mind, the architecture is cloud-agnostic—enabling deployment on any cloud platform or on-premises environment based on organizational needs. For organizations leveraging AWS commercial or GovCloud, the solution connects with services such as Amazon S3/EBS/EFS for secure, scalable storage, AWS ECS/EKS and ECR for application container orchestration; AWS RDS PostgreSQL for the main transactional database; AWS ALB/NLB for traffic routing; AWS Transfer Family for SFTP data exchange with providers; and AWS IAM for robust role-based access management, confirming efficient and secure handling of public health data across the platform.

Deloitte offers end-to-end services to integrate EpiTrax—from deployment and configuration, to customization, support, testing, and training—working closely with your epidemiologists, technical teams, and compliance leaders to facilitate successful adoption and operation.