Skip to content

What the EMR Application Tier Actually Becomes – The Bifurcation, Three Honest Caveats, and Three Questions for Health System CIOs

EHR strategy 2026

Post 4 of 4 in The Narrowing EMR series.

KEY TAKEAWAYS

  • Epic added 176 net acute care hospitals in 2024 – its largest-ever annual net gain – expanding market share to 42.3%. Oracle Health lost 74 hospitals over the same period. Epic won nearly 70% of new hospital contracts in 2024.
  • The argument of this series is late-decade, not near-term. It depends on three conditions maturing between 2028 and 2032: democratized agent-building tooling, AI-assisted semantic-layer extraction at scale, and mature healthcare-native open data platforms.
  • The bifurcation: Epic remains the clinical system of record (documentation, orders, MAR, certified quality reporting). What moves elsewhere is analytics, AI agents, population health, clinical research, value-based care risk modeling, and revenue cycle optimization.
  • The three questions health system CIOs and CMIOs should be asking in 2026: (1) Where does your data live and who governs it? (2) Who decides what AI agents run against your clinical data? (3) What is your 2030 semantic layer strategy?
  • If those proofs of concept for AI-assisted semantic-layer extraction land at Mayo, Kaiser, or Intermountain in the next two to four years, the middle of the market is expected to follow. The question is whether organizations are positioned to move or watching from the bench.
  • The decisions you make about what sits around the EHR matter more than the decisions you make about the EHR itself. That has not been true for a generation. In the author’s view, it is now.

Posts 1 through 3 made the analytical case for why the EMR application tier narrows over the late decade and where the strategic value moves. This post is the prescriptive close: what actually happens to Epic, what the bifurcation looks like, and three questions a CIO or CMIO should be working on right now.

Three Honest Caveats Before Any Prescription

Epic is winning the current buyer decision, and the data is not close. Fierce Healthcare, citing KLAS, reported that Epic added 176 net acute care hospitals in 2024, the company’s largest-ever annual net gain, expanding its market share to 42.3%. Oracle Health lost 74 hospitals over the same period, and Meditech lost 57. Epic won nearly 70% of new hospital contracts in 2024. On a 2026 procurement timeline, Epic is often the right call for execution reasons. Nothing in this series argues otherwise. The argument is late-decade, not near-term.

What I’ve laid out depends on three conditions maturing between roughly 2028 and 2032: democratized agent-building tooling, AI-assisted semantic-layer extraction at scale, and mature healthcare-native open data platforms. Each of those is plausible. None of them is guaranteed. If two of the three stall, the timeline slips. If all three accelerate, it pulls forward. A 2026 buyer cannot reasonably bet on any of these landing on a procurement timeline. A 2028 or 2030 buyer can.

Epic remains in the stack, and regulation is part of why. Federal certification requirements, the installed-base legacy of the Promoting Interoperability era, prior-authorization API requirements, and the operational gravity of clinical workflow integration all preserve a floor under the role of the certified EHR. What is changing is the role Epic plays in the stack. The question is whether Epic sits at the center of the hospital’s strategic IT decisions or to the side as the clinical system of record. Those are very different roles. Epic’s posture is not static. The HIMSS 2026 Agent Factory and Curiosity announcements meaningfully expanded what hospitals can build inside the Epic environment. The argument of this series is not that Epic stands still. It is that, based on what is publicly documented today, even Epic’s expansion is happening within the vendor-anchored pole I described in Post 2, not toward the institution-anchored one.

The Bifurcation: What the EMR Application Tier Actually Becomes

Over the next five to ten years, here is what I think actually plays out.

Epic remains the clinical system of record. Documentation, orders, MAR, certified quality reporting, encounter management, and most of the day-to-day clinician workflow continue to run on Epic. Regulation preserves that floor. Operational gravity reinforces it. None of that changes meaningfully on a 2030 timeline.

What moves elsewhere is everything that sits above and around the system of record. The analytics plane. The AI agent plane. Longitudinal population health. Clinical research infrastructure. Value-based care risk modeling. Revenue cycle optimization. Population-scale decision support. That work increasingly runs on an organization-controlled data and AI layer, whether built on enterprise platforms like Snowflake or Databricks, healthcare-specific services like AWS HealthLake or Azure Health Data Services, Oracle’s healthcare data stack, or a healthcare-native successor, with customer-built or customer-governed agents operating against it.

Regulation preserves Epic’s floor. Strategic direction moves it off the ceiling. That is what I mean when I say the EMR application tier narrows. It does not stay where it has been for the last fifteen years. The important shift is that Epic increasingly becomes one critical system in that architecture rather than the unquestioned center of it.

Three Questions Every Health System CIO and CMIO Should Be Asking in 2026

If this argument is right, the work for health system leadership in 2026 is not a different EHR procurement decision. Most organizations aren’t in a procurement window anyway. It’s three questions the dominant strategy of the last decade didn’t require anyone to ask.

Where does your data live, and who governs it? If the honest answer is that most enterprise-critical data decisions still begin inside Epic’s operational data model, that may be an accurate description of 2026 and a poor description of 2030. The work to start now is mapping what an organization-controlled data platform would hold, which decisions that platform would enable that the current architecture does not, and which governance committee actually owns that platform when it exists. The hard work is organizational, not technical. The technical patterns are already proven in adjacent industries.

Who decides what AI agents run against your clinical data? If the honest answer is that Epic heavily shapes the approved ecosystem through programs like Partners and Pals, Connection Hub, and its own first-party tooling, and that your organization does not have a clear answer for the agents your own staff will build, that is worth noticing. It does not mean Epic is doing anything wrong. It means your organization is delegating an increasingly load-bearing strategic decision to a vendor. That may be the right call today. The question worth asking is whether you want to keep delegating it as the agent-building floor drops over the next five years.

What is your 2030 semantic layer strategy? Epic’s clinical logic, decision-support rules, and accumulated configuration are real assets. Reproducing them on a different substrate is not realistic on a 2026 timeline. Over a five-to-ten year window, AI-assisted extraction of equivalent semantic layers becomes plausible, in my view. If I were a CIO planning for that window, I would be watching organizations like the Mayo Clinic Platform, Kaiser Permanente, and Intermountain for early proof-of-concept work in this direction. If credible proofs land, my expectation is that the middle of the market follows quickly. The question is whether you are positioned to move when that happens or watching from the bench.

None of these three questions has a clean 2026 answer. That is the point. The organizations that start asking them in 2026 will have credible answers in 2030. The organizations that don’t will be reacting to the answers other people built.

Where Abundant Fits: Healthcare IT Consulting for Governance and Architecture

At Abundant, we work across the EMR landscape, with deep expertise in Epic, Oracle Health, and the data, AI, and governance layers that sit around certified EHR environments. Most of our engagements run through Epic environments, and we expect that to remain true for the foreseeable future. What this series argues is that the questions we are increasingly being asked in client engagements sit at a layer above the Epic-vs-Oracle decision. Where does the data live? Who governs the agents? What does the 2030 architecture look like? These are governance, architecture, and organizational-capability questions that exist independently of which EMR sits underneath them. That is what we’re built for.

If you are a CIO, CMIO, or CTO wrestling with those questions and the answer cannot be “we will figure it out when the time comes,” it is worth a conversation. Firms like ours are most useful when the question is governance and architecture. We sit alongside whatever Epic optimization or infrastructure execution work the client already has underway, focused on the strategic layer rather than competing with it.

What to take away

The safe path inverted because the environment changed. Reimbursement, care delivery, regulatory interfaces, and AI capability are all in motion simultaneously, and the playbook that won the last twenty years is not optimized for any of them.

Governance is the binding question because technology is no longer the binding question. When agent construction was hard, picking the vendor with the best agents was a reasonable strategy. When agent construction gets easy, the question becomes who governs the agents your own staff will build. That question lives at the data layer, not the application layer.

Healthcare is not exempt from the pattern that played out across every other enterprise data category over the last fifteen years. The 2024-2026 adoption data tells a different story than the legacy “healthcare is slow” narrative does. The pattern is late, not absent.

The EMR application tier narrows. Its role becomes more focused, not less essential. Regulation preserves the floor. Strategic direction moves it off the ceiling. And the health systems that recognize this in 2026 will be positioned for 2030 better than the ones that assume the environment will hold steady.

The argument of this series comes down to a single line. The decisions you make about what sits around the EHR matter more than the decisions you make about the EHR itself. That has not been true for a generation. In my view, it is now.

Frequently Asked Questions

As of 2024, Epic holds 42.3% of the acute care hospital EHR market in the US, having added 176 net hospitals in 2024 – its largest-ever annual net gain – and winning nearly 70% of new hospital contracts, according to Fierce Healthcare citing KLAS. On a 2026 procurement timeline, Epic is often the right operational choice. The argument of The Narrowing EMR series is not that Epic is the wrong procurement decision today. It is that the strategic question has shifted: the decisions about what sits around the EHR (data governance, AI agent governance, open data platforms) will matter more than the EHR selection itself over the 2026-2030 planning window.

Over the next five to ten years, the EHR’s role is expected to narrow – not disappear. The clinical system of record function (documentation, orders, MAR, certified quality reporting, encounter management) remains on the EHR, preserved by regulation (federal certification requirements, Promoting Interoperability era legacy, prior-authorization API mandates) and operational gravity. What moves to adjacent layers is analytics, AI agents, longitudinal population health, clinical research infrastructure, value-based care risk modeling, and revenue cycle optimization. The EHR becomes one critical system in the architecture rather than the unquestioned center of it.

The three questions health system CIOs and CMIOs should be asking now: (1) Where does your data live and who governs it? If most enterprise-critical data decisions still begin inside the EHR’s operational data model, that may accurately describe 2026 but poorly describe 2030. (2) Who decides what AI agents run against your clinical data? If the EHR vendor heavily shapes the approved ecosystem through partner programs and first-party tooling, and your organization lacks a clear answer for internally built agents, you are delegating an increasingly load-bearing strategic decision to a vendor. (3) What is your 2030 semantic layer strategy? Epic’s accumulated clinical logic is a real moat. AI-assisted extraction of equivalent semantic layers is expected to become plausible within a five-to-ten year window – the question is whether you will be positioned to move when proof-of-concept work at leading organizations (Mayo, Kaiser, Intermountain) lands.

Responsibility for governing AI agents in a hospital is shared across the CIO, CMIO, compliance office, and clinical governance committee — but the practical allocation depends on the architecture. In vendor-anchored architectures, the EHR vendor governs much of the approved agent ecosystem through partner programs and first-party tooling. In institution-anchored architectures, the hospital’s leadership team holds direct control. The governance gap most health systems face in 2026 is that their architecture assigns this authority by default – through the EHR vendor’s partner and integration policies – rather than by explicit organizational decision. The ‘who decides what AI agents run against your clinical data’ question is not theoretical: it is being answered in 2026 by every health system’s current architecture, whether or not leadership has articulated a policy.

Healthcare data governance is the set of policies, accountability structures, and decision-making processes that determine how clinical and operational data is accessed, used, and controlled across a health system. It matters for EHR strategy because the EHR historically served as the de facto data governance layer – it owned the data model, controlled access, and determined which analytics and AI tools could operate against clinical data. As analytics and AI workloads migrate to organization-controlled data platforms (Snowflake, Databricks, AWS HealthLake, Oracle OHDI), health systems must build explicit governance architecture for that layer. The CHIME-KLAS Digital Health Most Wired 2025 findings confirm that formal data governance structures are the primary differentiator between digital leaders and laggards – more so than EHR choice.

Relying solely on Epic for analytics and AI has three practical limitations in 2026. First, Epic’s governance layer for first-party agents and deepest workflow paths is vendor-controlled – hospitals build within Epic’s environment and approved ecosystem, not against open data standards. Second, Epic’s analytics capabilities are optimized for operational and clinical reporting within the Epic data model; population-scale AI, longitudinal research, and value-based care risk modeling increasingly require data to move to platforms built for those workloads (Snowflake, Databricks, AWS HealthLake). Third, Epic’s first-party agent roadmap does not yet, based on publicly available documentation, support open agent-interoperability standards (MCP, Agent2Agent) that Microsoft, Salesforce, AWS, and Oracle are participating in. None of this makes Epic the wrong clinical system of record. It does mean that health systems planning their 2030 architecture need a data and AI governance layer that exists independently of the EHR.

Ryan Kent

About the Author

Ryan Kent is the founder of Abundant Healthcare Strategies, a healthcare IT advisory firm that helps health systems navigate strategic IT decisions, digital transformation, and AI governance. With over 10 years in healthcare IT consulting, Ryan works with CIOs, CMIOs, and CTOs at health systems navigating the transition from EHR-centric IT strategy to organization-controlled data and AI architecture. The Narrowing EMR series reflects his ongoing advisory work with health systems planning their 2026–2030 technology strategy.