Everything you need to know.

Surely is a consented health record retrieval platform built for New Zealand insurance underwriting. When an underwriter or broker needs an applicant's medical history, Surely automates the entire request process: from sending a secure consent link to the applicant, through to retrieving the authorised records from the GP clinic via Medtech ALEX FHIR, and delivering a formatted report. What used to take weeks now happens in minutes.

Surely connects to GP practice management systems via the Medtech ALEX FHIR API, the same standards-based interface used by NZ health software. This means Surely works with practices running Medtech Evolution and Medtech32 with ALEX FHIR enabled, which covers the majority of NZ general practices. We're actively expanding our integration coverage and can work with your team on specific clinic requirements.

Consent is at the core of how Surely works. Every record request begins with the applicant receiving a secure, personalised link. They can review exactly what information is being requested, from which clinic, and for what purpose, before they e-sign. This creates a verifiable, time-stamped consent record aligned with the NZ Privacy Act 2020 and Health Information Privacy Code. Unlike a paper form in a filing cabinet, Surely's consent chain is auditable end-to-end.

Once the applicant has provided consent, Surely retrieves the records automatically, typically within minutes. The total turnaround time depends largely on how quickly the applicant acts on their consent link. For applicants who respond promptly, you can go from request to report in the same day. This compares to a manual process that typically takes 2–6 weeks.

No. That's by design. Surely connects to the clinic's existing Medtech PMS via FHIR, so there's no new software for the GP practice to install or learn. Consent requests and record retrieval happen through the existing system infrastructure. GPs retain full visibility and control over which records are shared, and the entire interaction is structured to fit within their existing workflow, not interrupt it.

Yes. Surely is built to meet the requirements of the NZ Privacy Act 2020, the Health Information Privacy Code, and SOC 2 security standards. All data in transit is encrypted. Reports are delivered through secure, time-limited access links, not email attachments. We do not store health records beyond the period needed to process and deliver each request. Our infrastructure and data handling practices are reviewed regularly by independent auditors.

The easiest way to get started is to book a demo. We'll walk you through how the platform works, discuss your team's workflow, and map out how Surely can be configured for your specific use case, whether you're an insurer, broker, or GP practice group. Reach out to us at hello@surely.co.nz or visit our contact page to get in touch.