Connecting an application to the wellbeing applications interface

Applications and digital services can retrieve patient data from Kanta Services when they are connected to the wellbeing applications interface.

Connecting the application to the interface proceeds in stages and takes approximately 2-3 months.

Applications must have a backend service that operates in a trusted environment. The backend service handles communication with the interface.

Connecting a wellbeing app to the interface

Develop the application and familiarise yourself with the regulations and the FHIR standard.
 

Check the Finnish Institute for Health and Welfare (thl.fi) regulations when developing your wellbeing app:

  • THL Regulation 4/2025
  • THL Regulation 5/2024
  • ‘Wellbeing app that uses client data’ profile.

See also

You can find support for using the interface in the following:

Join the client test environment and then test the application independently.

Register for the client test environment by submitting the following forms to the Kanta Services:

Send the forms by email to kanta@kanta.fi.

Once Kela has approved your application, apply for a test server certificate from the Finnish Digital and Population Data Services Agency (DVV).

  • Server-based apps need a test server certificate for both the client test environment and joint testing.
  • You can only apply for a wellbeing application service certificate once the app has been approved for client testing and Kela has given the organisation’s OID code to the application provider.
  • We will send you more detailed instructions separately on how to apply for a certificate from Kela.
  • The service certificate and the application are linked together with the OID code in the serialNumber field under Subject in the service certificate.
    • The OID code is a unique OID code that the system provider applies for the application.
Read more about client relationships and the client test environment.

The wellbeing app must comply with the requirements of the Client Data Act (Category A) and must pass the certification process under the Client Data Act.

The certification of a wellbeing application includes joint testing by the Kanta Services, a data security assessment performed by an inspection body accredited by Traficom, and the registration of the application in the register maintained by Valvira.

Find out about certification and key requirements

Test the required functionalities in the joint testing of the Kanta Services.

The required functionalities are described in Annex 3h (thl.fi) of THL Regulation 5/2024 (thl.fi).

Joint testing refers to the verification of the internal testing of the app and ensuring that it functions in the Kanta Services’ client test environment. Joint testing is intended for testing in the final stage of development.

Find out more about the joint testing process

App providers are responsible for ensuring that any other testing of the app is sufficiently comprehensive and performed at a high level of quality.

Parties to and responsibilities in joint testing

Register for joint testing by submitting the application form for the Patient data interface for wellbeing applications service to Kela. Send the form by email to kanta@kanta.fi.

Have a data security assessment carried out by an accredited information security inspection body.

Wellbeing applications must pass a data security assessment performed by an inspection body accredited by Traficom. 

Read more about the data security assessment

To deploy the app in production, submit the necessary notifications to Valvira, DVV and Kela.

  1. Register the wellbeing app on Valvira’s Register of information systems (valvira.fi).
  2. Accept the wellbeing app interface’s terms of delivery (pdf) and service description (pdf).
  3. Acquire a production service certificate from the Digital and Population Data Services Agency (dvv.fi).
    • Server-based apps need a service certificate for wellbeing applications from DVV for production.
    • The service certificate and the application are linked together with the OID code in the serialNumber field under Subject in the service certificate.
    • The backend system of the wellbeing application, i.e., the server application running on the system provider’s server, is connected to the Kanta Services. The IP addresses assigned to the service must be static and belong to the public IP address space.
    • The data communication of wellbeing applications to the Kanta Services takes place over the public internet.
  4. Submit the details of the app to be published to the Kanta Services by email, after which
    • The app is technically registered in the Kanta Services’ interface service. Technical registration requires that the wellbeing application has been published on Valvira’s register.
    • The app will be added to the list of applications on kanta.fi two weeks after technical registration.

Once you have verified production functionality, you can start production use.

App users can access their patient data in the wellbeing app by giving the app access rights to their patient data and by accepting the information about accessing patient data in the wellbeing app (pdf).

Notify Kela of any significant changes to the wellbeing app.

Notify Kela of changes by sending a change notification form by email to kanta@kanta.fi.