Component Architecture
The NHS App architecture should be tracked as a set of component dependencies rather than a single system.
Use Architecture Index for page contracts, route taxonomy, and sequence diagrams.
Use Interface and Assurance Layer for the drill-down view of supplier interfaces, API / Message Exchange for Social Care and Health (MESH) routes, partner onboarding, and assurance controls that sit beneath these components.
Simplified Component View
Use this as the orientation view. The detailed dependency view below keeps the route-family and interface distinctions that matter for evidence and assurance.
%%{init: {"themeVariables": {"fontSize": "11px"}, "flowchart": {"nodeSpacing": 18, "rankSpacing": 24}, "sequence": {"actorFontSize": 11, "messageFontSize": 11, "noteFontSize": 11}}}%%
graph LR
DPHC["DMedC / DPHC\nregistration context"] -. evidence gap .-> NHSApp["NHS App"]
NHSApp --> Identity["Access and identity\nNHS account / login"]
NHSApp --> Core["Core national services\n111 / Health A to Z / Find services"]
NHSApp --> GPLinked["GP-linked services\nrecords / prescriptions"]
NHSApp --> Provider["Provider routes\nappointments / documents / results"]
NHSApp --> Messaging["Messaging\nNHS Notify"]
NHSApp --> Prescribing["Prescriptions\nEPS context"]
GPLinked --> National["National dependencies\nPDS / PCRM / ODS / Spine"]
Core --> CoreRoutes["Public web / NHS login\nnational APIs"]
Provider --> Aggregator["Aggregator / Wayfinder\nand PEP routes"]
Identity --> Assurance["Onboarding and assurance"]
GPLinked --> Assurance
Provider --> Assurance
Messaging --> Assurance
Detailed Component Dependency View
%%{init: {"themeVariables": {"fontSize": "11px"}, "flowchart": {"nodeSpacing": 18, "rankSpacing": 24}, "sequence": {"actorFontSize": 11, "messageFontSize": 11, "noteFontSize": 11}}}%%
graph TD
Cohort["DPHC cohort"] --> AccessGate["Mobile access and cohort gate"]
AccessGate --> NHSApp["NHS App"]
NHSApp --> Account["NHS account / NHS login"]
NHSApp --> CoreNational["Core national services\n111 / information / choices"]
NHSApp --> PFS["GP Connect Patient Facing APIs"]
PFS --> APIPlatform["NHS API Platform"]
APIPlatform --> PDS["PDS"]
APIPlatform --> ODS["ODS"]
ODS --> SDS["Spine Directory Service"]
SDS --> GPSystem["GP clinical system"]
GPSystem --> IM1["Interface Mechanism 1"]
NHSApp --> Notify["Messaging / NHS Notify"]
Notify --> NotifyAPI["NHS Notify API / MESH"]
Notify --> PDS
DMICPEvent["DMICP appointment event / feed"] -. candidate .-> Adapter["Controlled adapter"]
Adapter -. candidate .-> IdentityChecks["Patient / ODS / suppression checks"]
IdentityChecks -. candidate .-> NotifyAPI
NHSApp --> PCA["Patient Care Aggregator\n/ Wayfinder"]
PCA --> ERS["e-RS"]
PCA --> GetAppointments["Get Appointments API"]
PCA --> RecordService["Record Service API"]
PCA --> PEPAppointments["PEP appointment or\nbooking function"]
PEPAppointments --> NHSLogin["NHS login"]
PEPAppointments --> PAS["Trust PAS / booking systems"]
NHSApp --> ProviderRoutes["Provider portal / provider routes"]
ProviderRoutes --> ProviderDocuments["SHC provider document route"]
ProviderRoutes --> ProviderResults["Provider results system"]
ProviderDocuments -. "optional sub-route" .-> PEPDocuments["PEP document route"]
ProviderResults -. "optional sub-route" .-> PEPResults["PEP results-release route"]
NHSApp --> EPS["EPS context"]
Professional["Professional systems"] --> GPPro["GP Connect Professional APIs"]
GPPro --> Spine["Spine / SSP"]
Integration["Partner onboarding / assurance"] --> NHSApp
Integration --> Notify
Integration --> PCA
Integration --> IM1
DPHC["DMedC / DPHC registration"] -. unresolved .-> GPSystem
Cortisone["Programme Cortisone / InterSystems"] -. "candidate adapter or data route" .-> Adapter
Component List
| Component | Role in this wiki | Current source confidence |
|---|---|---|
| NHS account / NHS login | Access, identity, and account experience | High for public and roadmap context |
| Core national services | NHS App-presented public, authenticated-web, and national-API services including NHS 111 online, NHS Health A to Z, Find NHS services near you, organ donation, National Data Opt-Out, research, vaccination, and digital health checks | High for service taxonomy and integration style; service-specific entitlement remains conditional |
| NHS Health A to Z and NHS Service Search | Public conditions, symptoms, treatments, medicines, healthy-living, and Find NHS services near you content presented through public web integrations | High for current public-content route, user-visible labels, and 2026/27 roadmap |
| NHS App Profile | NHS number, contact details, home address, current GP surgery, health choices, App settings, and family/carer navigation | High for current user-visible catalogue; each field retains its own source, correction, change, proxy, and rollout boundary |
| Register with a GP surgery | Connected service for viewing a current GP surgery and applying to an ordinary NHS GP practice, using NHS record matching, practice acceptance and registration processes | High for ordinary NHS route; not proof of Defence Primary Healthcare (DPHC) GP-practice equivalence and must be governed as a DPHC transition function |
| PCRM | Back-end service that coordinates formal GP registration between new / previous GP systems and Personal Demographics Service (PDS); it works alongside Register with a GP surgery and GP2GP | High for service role and stated Defence Medical Services (DMS) coverage; not proof of named DPHC practice configuration, PDS state, record-transfer completion, or NHS App access |
| NHS 111 online / NHS Pathways / Directory of Services | Urgent-care triage and locally commissioned service signposting presented through an authenticated NHS App web route or public website | High for national service and component definition; not DPHC appointment evidence |
| NHS Blood and Transplant Organ Donor Register | Authoritative organ-donation decision service reached through an NHS App API integration | High for service-owner and technical route |
| National Data Opt-Out | National choice service recorded against the NHS number on Spine and presented through the NHS App or alternative channels | High for service definition; age/proxy and channel rules remain route-specific |
| Be Part of Research | NIHR research-participation service presented through an NHS login-enabled web integration | High for service definition; DPHC App entitlement remains untested |
| PDS | NHS number, demographics, registered GP context | High for component definition |
| Organisation Data Service (ODS) | Organisation identifiers | High for component definition |
| Spine Directory Service (SDS) | Registered-GP endpoint lookup route in the reviewed GP booking/referral guidance | High for endpoint-lookup role in the reviewed guidance |
| Spine / Spine Secure Proxy (SSP) | National infrastructure and secure proxy pattern | High for component definition and GP Connect architecture |
| NHS API Platform | API route for some NHS services | High for platform definition |
| GP Connect Patient Facing APIs | Patient-facing GP record, prescription, and permission route | High for API definition |
| Interface Mechanism 1 (IM1) | Supplier-specific GP-system interface and pairing route | High for IM1 definition and assurance process |
| Partner onboarding / assurance | Clinical safety, data protection, technical assurance, information security, and connection route | High for onboarding model |
| MESH | Messaging route used in GP Connect and NHS Notify contexts | High for route definition from official NHS architecture pages |
| Electronic Prescription Service (EPS) | Prescription infrastructure context | High for API definition |
| Online consultation systems | Named web integrations for GP medical queries and administrative requests such as letters, fit notes, test-result information and referrals | High for current partner taxonomy; supplier, practice workflow and DPHC availability are route-specific |
| Patient Care Aggregator / Wayfinder | Secondary-care referral and booking summary route, with deep links to e-RS or Patient Engagement Portal (PEP) appointment or booking functions | High for service and integration-route definition |
| Personal health records and care-plan services | Named partner routes that may expose care plans, health trackers, patient-contributed data, provider messaging, medicines, documents, results, imaging, or appointments | Moderate-high for live partner taxonomy; never treat one partner's feature set as a universal NHS App baseline |
| Provider portal / provider routes | NHS App-connected or deep-linked provider routes that may expose appointment, document, results-release, PIFU, form, or other provider-specific functions | Moderate-high for route taxonomy; every claim must be function-tagged |
| PEP appointment or booking function | Provider portal route for appointment detail, booking, change, cancellation, or deep-link actions where the portal supports them | High for Wayfinder context; not proof of documents or results |
| Secondary healthcare (SHC) provider document route | Secondary-care provider route for appointment letters, outcome letters, discharge summaries, questionnaires, and provider-held correspondence | Moderate-high for NHS App / provider document taxonomy; route-specific evidence needed |
| PEP document route | Provider portal route for provider-held letters, forms, questionnaires, discharge summaries, outcome letters, or other clinical correspondence | Moderate-high for NHS App / provider document taxonomy; route-specific evidence needed |
| Provider results system | Provider-held test-result source and release-control context | High for clinical-control concept; provider and route evidence needed |
| PEP results-release route | Provider portal route for provider-held results released through a PEP or NHS App-connected digital route | High for clinical-control concept; provider and route evidence needed |
| GP-filed document view | GP-record route for documents filed into the GP record and visible through NHS App GP health-record access | High for ordinary NHS GP-record scope; DPHC equivalence unproven |
| GP-filed result view | GP-record route for GP or hospital-ordered results filed into the GP record and visible through NHS App GP health-record access | High for ordinary NHS GP-record scope; DPHC equivalence unproven |
| NHS Notify | Multi-channel messaging service including NHS App messages, email, SMS, and letters | High for service definition |
| Defence Medical Information Capability Programme (DMICP) appointment event / feed | Proposed source event for a bounded DPHC Firmbase one-way reminder route | Not evidenced; source contract, timing, identifiers, statuses, and ownership required |
| Controlled adapter | Architectural role that would transform and validate a DPHC event before an NHS-facing submission | Candidate role only; Programme CORTISONE / Health Connect is one possible implementation, not a selected design |
| Programme Cortisone | MOD digital-record programme | High for programme existence, unknown for NHS App details |