OASIS members have developed a variety of specifications that can help governments, businesses and projects in the fight against COVID-19. These specifications build on the expertise of the OASIS community in the areas of blockchain, cryptography, data exchange, emergency management, healthcare, privacy, and security.


AS4 is an OASIS Standard for secure and reliable exchange of documents and data, defined by the OASIS ebXML Messaging Technical Committee.

Baseline Protocol

Part of the Ethereum OASIS Open Project, the Baseline Protocol is an open source initiative that uses cryptography, messaging, and blockchain to deliver secure and private business processes via the public Ethereum Mainnet. It enables confidential and complex collaboration between organizations without leaving any sensitive data on-chain. The project is exploring ways to make contact tracing data exchange more private and secure.

Classification of Everyday Living (COEL)

COEL is a privacy-by-design framework for behavioral data collection and reporting. It provides a framework for implementing a distributed system capable of capturing data relating to an individual as discrete events. 

Cross-Enterprise Security and Privacy Authorization (XSPA)

The XSPA Profile for SAML V2.0 for Healthcare enables the interoperable exchange of healthcare privacy policies, consent directives, and authorizations. Its focus is to develop data segmentation and healthcare security classification profiles in harmony with HL7 and IHE.

Emergency Data Exchange Language (EDXL)

EDXL is a family of standards that provide a common language, or interface, for data exchange across emergency-related systems. 

EDXL specifications are included in the Vocabulary Access and Distribution System (VADS) of the Public Health Information Network (PHIN) of the US Centers for Disease Control and Prevention (CDC).

EDXL specifications include:

  • EDXL-HAVE Hospital Availability Exchange 2.0, an XML messaging standard primarily for exchange of information related to health facilities in the context of emergency management. HAVE supports sharing information about hospital status, services, and resources. 
  • EDXL-SitRep Situation Reporting 1.0, which supports data sharing of information on situations, incidents, events and responses. 
  • EDXL-TEP Tracking Emergency Patients v1.1 , which supports sharing of emergency patient and tracking information from the point of patient encounter through definitive care admission or field release. 

Privacy Management Reference Model (PMRM)

PMRM provides a guideline or template for developing operational solutions to privacy issues. It also serves as an analytical tool for assessing the completeness of proposed solutions and as the basis for establishing categories and groupings of privacy management controls. See the Quick Start Guide for Data Protection to Support Regulatory Compliance.