Built for a system that was overdue for change.

Surely is a New Zealand health technology company building the infrastructure for patient-led, consented digital health record retrieval, putting patients in control of their own health information.

Compliant with the HIPC 2020 End-to-end encrypted
Zero cost to general practices PMS integration
Secure health record access illustration

Make health data move as fast as decisions require, with the patient in control.

The New Zealand health system holds a large volume of valuable clinical information. When a patient needs access to their own records the process should be simple and reliable. In practice, this is often not the case.

Surely places the patient at the centre of every request, and delivers records securely to the patient and/or their authorised delegate.

Patient-led requests without ambiguity

Making it simple for practices to comply in a timely manner. Built to integrate with the Practice Management System (PMS) already in use.

Patient-led

The patient completes a request for their data and decides who, if applicable, they wish to share the data with.

Signed, digital consent

Before a practice receives a request, the patient has already signed their consent. This consent aligns with the Health Information Privacy Code 2020 Rule 6.

Compliance and audit trails

Patient-led requests are logged. A complete audit trail of the request, and the practice fulfilling a request in a timely manner, is held on file.

Secure release and delivery

Approved records are extracted and delivered safely to the patient and their authorised recipient (if there is one). Once the request is complete, all related data is automatically and permanently deleted from Surely.

Built to support your Privacy Act and compliance obligations

Surely manages consent documentation, auditability, and secure data handling, helping general practices and their partners meet their Privacy Act obligations with confidence and minimum fuss.

Health Information Privacy Code 2020

Compliant, with the patient's informed consent at the heart of the request.

Practice Management System integration

Fast Healthcare Interoperability Resources (FHIR) connectivity.

End-to-end encryption

All data encrypted in transit.

Full audit trail

Every consent and access event is logged.

No data retention

Once a request has been fulfilled, all health data is automatically and permanently deleted.

Surely is built by a dedicated team who are passionate about improving patient access to health funding.

Along with their talented developers, the Surely team brings direct experience building consented health-data exchange systems with GPs, PHOs, and PMS vendors in the New Zealand market.

Book a demo