Use of Provenance is out of scope for this IG beyond what's already mentioned in sdc-security.html. The EHR group is working on a parallel profile that could be used as a companion to the SDC IG, but it is not a requirement for this to occur. It is possible that future ONC projects may address this in more detail as well. Note that not all SDC systems will be dealing with patient-specific questionnaires.