Question · DSI Source Attributes
Do I have to keep HTI-1 source attributes updated, and how often?
Certified EHRs must let users see plain-language source attributes for the decision support tools they supply: 13 for evidence-based tools and 31 for predictive (AI or other model-based) tools, covering purpose, training data, fairness, external validation, performance and ongoing monitoring.
01 / The answer
The short answer
Yes, if you develop a Health IT Module certified to 45 CFR 170.315(b)(11). Since January 1, 2025, 45 CFR 170.402(b)(4) has required developers to review source attributes, intervention risk management practices and the related public summary information on an ongoing basis and update them as necessary. The rule sets no fixed interval, so updates should follow changes to the model, its data or its measured performance. The duty falls on certified developers, not directly on hospitals. HTI-5, proposed in December 2025, would remove these requirements, but no final rule had been issued as of October 2026.
02 / The rule
What DSI Source Attributes requires
Certified EHRs must let users see plain-language source attributes for the decision support tools they supply: 13 for evidence-based tools and 31 for predictive (AI or other model-based) tools, covering purpose, training data, fairness, external validation, performance and ongoing monitoring. It is the main US federal rule that forces disclosure of how a clinical prediction model was built and tested, though a pending proposal would remove it.
- 01Support all 31 source attributes for each predictive DSI and 13 for each evidence-based DSI the developer supplies.
- 02Give a limited set of identified users complete, up-to-date plain-language access to those attributes.
- 03Show when validation, local performance or update-schedule information is not available for a predictive DSI.
- 04Let identified users record, change and access source attributes, including extra attributes for predictive DSIs.
03 / Records
Records to keep
- 01Source attribute record for each supplied predictive and evidence-based DSI
- 02External validation and fairness test results by demographic group
- 03Intervention risk management analysis and mitigation log
- 04Dated review history showing attributes kept current
Optional evidence · where Planisphere fits
Keep a record anyone can check
When your team meets a duty, Planisphere can seal the event it reports as a receipt.
A disclosure shown, a review signed, a model change approved: the event your system reports.
The event becomes a sealed receipt, dated and attributed to whoever is signed in.
Paste the receipt into Verify. No account or key.
A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.
SOURCES
Go back to the source
Federal Register (ASTP/ONC)
RELATED
Related: DSI Source Attributes: the full guide · What are the 31 source attributes required for predictive DSI under HTI-1?