OpenMRS1 Limited DBA OPENMRS INC

What it reported doing in 2024

OpenMRS continues to be resolute in its mission. Embracing teamwork, the OpenMRS community has been able to make great strides in improving health care delivery in resource-constrained environments by creating a robust, scalable, user-driven, open source medical record system platform. The achievements during the year include: Third-Party Security Validation: Engaged independent security experts to conduct comprehensive penetration testing of the O3 Reference Application. The assessment included a thorough review against the OWASP Top 10 most critical web application security risks. Successfully achieved Compliance Certificate, demonstrating the Platform meets rigorous security standards and industry best practices.Security Improvements: Implemented comprehensive security enhancements including more rigorous application of permission checks and a permission model for global properties. Conducted review of several REST endpoints to ensure appropriate privileges and authentication. Migrated to a whitelisting mechanism for unauthenticated URLs. Implemented an auditing framework and moved to XStream whitelisting.Major Platform and Application Releases: Released major upgrade to Platform 2.7, including security fixes and a two-fold increase in Developer performance speed due to boot-up time improvements. Also released Platform 2.8-alpha (SNAPSHOT) for community testing. Platform 2.8 release includes foundational Java upgrades (better security and DevX), Spring upgrades, and much more. O3 Releases: Released and pre-released major upgrades to O3 (3.2.1, 3.3.0, and 3.4) that delivered performance enhancements, new feature additions, and essential bug fixes to O3. Substantial O3 RefApp QA/testing activities were conducted alongside comprehensive issue identification.Quality Assurance: Reviewed all O3 UI tests for gaps, and added additional O3 automated test coverage. Design QA: Review of community-contributed features for design consistency and usability. For instance, supported design inputs for IPD Squad.Content Packages and Developer Tools: Improved the OpenMRS SDK to automatically handle content package components that previously required manual file arranging. Improved documentation for developers aiming to develop and re-use content.Feature Squad Support: Provided guidance to a steady number of O3 Feature Squads to facilitate alignment and prioritization among OpenMRS Implementing Organizations working on O3, and to further a broader suite of O3 features.New Squad Initiatives: Documentation Revival Squad: Launched effort to harmonize Implementer & Developer guidance documents. Successfully unified and updated a one-stop O3 Developer Guide in the OpenMRS Wiki, and initiated improvements to Reporting Documentation.Localization Squad: Launched focused efforts to improve translation workflows, training resources, and governance that will benefit non-English PEPFAR-supported sites (including DRC). Also provided translated courses including the Intro to O3 for Devs and Form Builder courses, into Spanish and French, particularly to aid capacity building in O3 and Form Building in both Cote dIvoire and DRC.Google Summer of Code: Supported projects initiated through Google Summer of Code by providing dedicated mentorship, significant requirements planning, and community priority alignmentprojects aimed at benefiting TAP and PEPFAR organizations. Key projects included: Interactive Builder for Form Translations within the Form Builder (particularly beneficial for DRC), Improved Audit Logging, OpenMRS Standalone Replacement, Performance Testing Enhancement, Fast Data Entry Feature Fix, and Immunization Schedule App for O3.Standards and Interoperability: Gave an award-winning presentation on how OpenMRS has successfully adopted FHIR standards for data exchange (without needing to replace the backend), at the first ever ODHS (Open Digital Health Summit).Capacity Building and Training: Facilitated 1-week training in Kinshasa on OpenMRS in gener

Financial Efficiency

• Mission deployment rate: 95.7%; rating input score 96
• Program expense ratio: 97.7%; rating input score 98
• Fundraising efficiency: $115.54 raised per $1 spent on fundraising; rating input score 88; 88th percentile among comparable filings

Transparency & Controls

• Consistency checks: 100%; rating input score 100; 63rd percentile among comparable filings
• Pay-setting controls: Limited
• Foreign activity oversight: Scored; rating input score 0
• Grant itemization coverage: Scored; rating input score 0
• Major donor itemization: Yes; rating input score 100
• Related-party transparency: Limited

Accountability

• Independent voting board: 100%; rating input score 100; 63rd percentile among comparable filings
• Governance controls: 7 of 7 controls in place; rating input score 100
  • Conflict-of-interest policy: Pass
  • Whistleblower policy: Pass
  • Document-retention policy: Pass
  • CEO compensation review process: NotApplicable
  • Other executive compensation review process: NotApplicable
  • Form 990 shared with the board: Pass
  • Board meeting minutes documented: Pass
  • Audit committee oversight: Pass
  • Independent financial-statement audit: Pass

Sustainability

• Operating margin: 2.1%; rating input score 42; 42nd percentile among comparable filings
• Total-asset coverage ratio: 0.99; rating input score 42; 42nd percentile among comparable filings
• Liabilities to assets ratio: 0.11; rating input score 40; 40th percentile among comparable filings
• Officer compensation ratio: 0%; rating input score 81; 81st percentile among comparable filings

Growth

• Program expense growth: 31.3% per year; rating input score 100; 91st percentile among comparable filings
• Revenue growth: 23.1% per year; rating input score 100; 88th percentile among comparable filings
• Asset growth: 15.4% per year; rating input score 100; 73rd percentile among comparable filings