Surely connects to your Medtech PMS so consent requests, record retrieval, and GP approvals happen inside your existing workflow, with no extra admin.
A single consented workflow from your PMS to the underwriter, with GP oversight built in.
Health records delivered in under five minutes via direct Practice Management System integration, when consent and data availability allow.
Digital consent aligned with the NZ Privacy Act and HIPC 2020. Full audit trail for accountability.
Optional GP approval flow with notifications to the Medtech inbox when your process requires it.
No new dashboards, no extra logins, no "please send a fax" phone calls. Surely talks directly to your PMS so records move when you say they can, and stay put when you don't.
Surely doesn't replace clinical judgement. It wraps the record request in verifiable consent and gives your team final say at every step.
Applicants authorise a specific report type and date range. You see exactly what they agreed to. No blanket disclosures, ever.
Turn on mandatory GP sign-off per clinic, per report type, or per applicant. Your workflow, your threshold.
Every consent, approval, retrieval, and download is logged with tamper-evident timestamps, ready for any Privacy Commissioner review.
Patients and clinics can withdraw consent at any point. Future retrievals halt immediately; the audit trail captures the withdrawal.
Clear answers on liability, data scope, and the amount of work your front desk will actually need to do.
No. Once the clinic is onboarded, inbound Surely requests arrive as standard Medtech tasks. Most practices handle them in under a minute, reviewing the scope and approving. There's no extra inbox to monitor, no faxes, no phone callbacks.
Surely consent is digital, scoped, time-stamped, and aligned with the NZ Privacy Act 2020 and HIPC 2020. It captures the specific information categories the applicant has authorised, the purpose, and the recipient. Our legal framework has been reviewed against IPP 11 disclosure standards.
Yes. Clinics configure their own release policies: which report types are eligible, which date ranges are permissible, whether sensitive record categories (mental health, sexual health) require explicit per-request approval. Surely enforces those rules automatically.
Withdrawal is one click, for the patient via their consent portal or via your clinic at any time. Future retrievals under that authorisation stop immediately, and the withdrawal event is captured in the audit trail alongside the original consent.
Nothing. Surely is funded by the insurers who request records. Clinics are never billed for integration, usage, or individual requests. Many clinics receive an administration fee per completed request in place of the legacy paper-based invoice.
A 20-minute call is enough to walk through the Medtech integration, review our data-sharing agreement, and see a live request end-to-end.