Surely is a patient-led service: patients and applicants use Surely to request their own health records from your practice. Surely connects to your Practice Management System so consent, record retrieval, and any clinical sign-off happen inside the system you already use, with no extra admin and no software to install.
A consented, patient-led workflow from your PMS to whoever the patient authorises as the recipient, with practice oversight built in.
Health records delivered in under five minutes once consent is confirmed, via direct Practice Management System integration.
Digital consent aligned with the NZ Privacy Act 2020 and the Health Information Privacy Code 2020. Full audit trail for accountability.
Full practice oversight on every request, with notifications inside your PMS. Clinical sign-off can be configured as a mandatory step for practices that require it.
Surely talks directly to your Practice Management System so records move when you say they can, and stay put when you don't.
Surely doesn't replace clinical judgement. It wraps every record request in verifiable patient consent and gives your team visibility and the ability to decline at any step.
Patients and applicants authorise a specific report type and date range. You see exactly what they agreed to. No blanket disclosures, ever.
Configure the level of involvement that suits your practice. Require active sign-off for specific request types, or let your team review at their discretion. Your practice, your rules.
Every consent, approval, retrieval, and delivery is logged with tamper-evident timestamps, ready for any Privacy Commissioner review.
Patients and practices can withdraw consent at any point. Future retrievals halt immediately, and the audit trail captures the withdrawal.
Clear answers on liability, data scope, and the amount of work your team will actually need to do.
No. Once the practice is onboarded, inbound Surely requests arrive as standard notifications inside your PMS inbox. Most practices handle them in under a minute, reviewing the scope and approving. There's no extra inbox to monitor.
Surely consent is digital, scoped, time-stamped, and aligned with the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020. It captures the specific information categories the patient or applicant has authorised, the purpose, and the recipient. Our framework has been reviewed against IPP 11 disclosure standards.
Yes. Practices configure their own release policies: which report types are eligible, which date ranges are permissible, and whether sensitive record categories require explicit per-request approval. Surely enforces those rules automatically.
Patients or practices can request consent withdrawal at any time by contacting the Surely support team. Once processed, future retrievals under that authorisation stop immediately, and the withdrawal event is recorded in the audit trail alongside the original consent.
Surely does not retain data. Once a request has been fulfilled, all data is automatically and permanently deleted from the system within a defined number of days. Audit logs are retained separately for compliance purposes.
Nothing. Surely is funded by the recipients of records. Practices are never billed for integration, usage, or individual requests. Many practices receive an administration fee per completed request.
A 20-minute call is enough to walk through the PMS integration, review our data-sharing agreement, and see a live patient-initiated request end-to-end.